{"level":"info","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Operator Version: 0.0.1"} {"level":"info","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Go Version: go1.25.8 (Red Hat 1.25.8-1.module+el8.10.0+24168+9fd3a552) X:strictfipsruntime"} {"level":"info","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Go OS/Arch: linux/amd64"} {"level":"info","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Setting Up Manager"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Load KubeConfig"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Initialize Manager"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Initialize Scheme"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Getting Manager Options"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Adding Healthz and Readyz checks"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Registering Components"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Initialize Prometheus Registry"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Initialize Prometheus metrics endpoint","endpoint":"http://0.0.0.0:8383/metrics"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Initialize ConfigMap watcher"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Initialize Validation Engine"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Initialize Reconciler"} {"level":"info","ts":"2026-04-24T19:11:05Z","logger":"DeploymentValidation","msg":"Starting Manager"} {"level":"info","ts":"2026-04-24T19:11:05Z","msg":"starting server","name":"health probe","addr":"[::]:8081"} {"level":"info","ts":"2026-04-24T19:11:05Z","logger":"ConfigMapWatcher","msg":"a ConfigMap has been created under watched namespace","name":"deployment-validation-operator-config","namespace":"openshift-deployment-validation-operator"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"Current set of enabled checks","checks":"dangling-horizontalpodautoscaler, dangling-ingress, dangling-networkpolicy, dangling-networkpolicypeer-podselector, dangling-service, dangling-servicemonitor, dnsconfig-options, duplicate-env-var, env-value-from, host-ipc, host-network, host-pid, hpa-minimum-three-replicas, invalid-target-ports, job-ttl-seconds-after-finished, liveness-port, minimum-three-replicas, no-anti-affinity, no-node-affinity, non-existent-service-account, non-isolated-pod, pdb-max-unavailable, pdb-min-available, pdb-unhealthy-pod-eviction-policy, priority-class-name, privilege-escalation-container, privileged-container, readiness-port, restart-policy, run-as-non-root, scc-deny-privileged-container, schema-validation, sorted-keys, startup-port, unsafe-sysctls, unset-cpu-requirements, unset-memory-requirements"} {"level":"info","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"The ConfigMap has been updated"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:11:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:11:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:11:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:13:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"info","ts":"2026-04-24T19:13:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:13:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:13:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-operator\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager-metrics-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager-metrics-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"info","ts":"2026-04-24T19:13:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"info","ts":"2026-04-24T19:13:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-infrastructure,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-infrastructure,helm.sh/chart=tsf-infrastructure-0.1.0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"test-tpa-pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"test-keycloak-pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-infrastructure\" not found"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" has memory limit 0"} {"level":"info","ts":"2026-04-24T19:13:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:13:07.198698 1 request.go:752] "Waited before sending request" delay="1.104712475s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjEyMzYsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"info","ts":"2026-04-24T19:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhbk-operator\" not found"} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:13:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"info","ts":"2026-04-24T19:13:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:13:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:13:17.199038 1 request.go:752] "Waited before sending request" delay="1.863509765s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjE1NTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtpa-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtpa-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-04-24T19:13:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:13:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-cainjector\" not found"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-webhook\" not found"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:13:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"info","ts":"2026-04-24T19:13:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:13:29.200019 1 request.go:752] "Waited before sending request" delay="1.867810292s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjE4MTAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-04-24T19:13:29Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:15:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:keycloak app.kubernetes.io/instance:keycloak app.kubernetes.io/managed-by:keycloak-operator])"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:15:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:15:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-redis\" is referring to an unknown secret \"redis-password-trusted-artifact-signer7zpgm\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-redis\" not found"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"enable-tls\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-redis\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-5k2qt\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-5k2qt\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-5k2qt\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-5k2qt\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-5k2qt\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-5k2qt\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-5k2qt\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-logserver\" not found"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"fulcio-server\" is referring to an unknown secret \"fulcio-cert-trusted-artifact-signerh85gd\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"fulcio\" not found"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"fulcio-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"fulcio-server\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"fulcio-server\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"fulcio-server\" is referring to an unknown secret \"fulcio-cert-trusted-artifact-signerh85gd\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"fulcio\" not found"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"fulcio-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"fulcio-server\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"fulcio-server\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-zgjfk","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-zgjfk","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-zgjfk","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-zgjfk","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-zgjfk","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-zgjfk","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-zgjfk","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-5k2qt\""} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-72wmt","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:15:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:15:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:15:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:15:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:15:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:15:07.211014 1 request.go:752] "Waited before sending request" delay="1.091578404s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjQ0MTUsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:15:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:15:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:15:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:15:17.211321 1 request.go:752] "Waited before sending request" delay="1.845785014s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjQ1OTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=tsf-tpa,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-tpa,app.kubernetes.io/version=2.2.0,helm.sh/chart=tsf-tpa-0.1.0"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-tpa\" not found"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"deployments-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"deployments-test\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"deployments-test\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,batch.kubernetes.io/job-name=create-db,controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,job-name=create-db"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:15:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:15:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:15:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:15:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:15:29.211052 1 request.go:752] "Waited before sending request" delay="1.862174967s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjQ5NjAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-04-24T19:15:29Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:17:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-04-24T19:17:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:17:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:17:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:17:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"info","ts":"2026-04-24T19:17:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:17:07.205194 1 request.go:752] "Waited before sending request" delay="1.324838489s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc3ODEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"info","ts":"2026-04-24T19:17:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"info","ts":"2026-04-24T19:17:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"integration-service-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"info","ts":"2026-04-24T19:17:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:17:19.206344 1 request.go:752] "Waited before sending request" delay="1.86291126s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/namespace-lister/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc5MzIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"namespace-lister\" not found"} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[apps:namespace-lister])"} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[apps:namespace-lister] []}) "} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-to-apiserver","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[apps:namespace-lister] []}) "} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:17:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:17:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,batch.kubernetes.io/job-name=migrate-db,controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,job-name=migrate-db"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,batch.kubernetes.io/job-name=create-db,controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,job-name=create-db"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,batch.kubernetes.io/job-name=create-importers,controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,job-name=create-importers"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:17:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"info","ts":"2026-04-24T19:17:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-service-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-webhook-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:17:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:17:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:17:31.205887 1 request.go:752] "Waited before sending request" delay="1.993042645s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjgwNDEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"dex\" not found"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:dex])"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"konflux-ui","kind":"Ingress","validation":"dangling-ingress","check_description":"Indicates when ingress do not have any associated services.","check_remediation":"Confirm that your ingress's backend correctly matches the name and port on one of your services.","check_failure_reason":"no service found matching ingress label (proxy), port web-tls"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"info","ts":"2026-04-24T19:17:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:17:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:17:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"image-controller-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"image-pruner\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"image-pruner\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"notification-resetter\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"notification-resetter\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-04-24T19:17:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:17:43.205083 1 request.go:752] "Waited before sending request" delay="1.813939275s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjgyNzEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:17:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"info","ts":"2026-04-24T19:17:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:17:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:17:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:17:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:17:53.205687 1 request.go:752] "Waited before sending request" delay="1.785152118s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjgzOTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-ui\" not found"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-search-ui\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-ft9rb","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-ft9rb","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-ft9rb","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-ft9rb","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tuf-repository-init\" not found"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-ft9rb","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-ft9rb","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-ft9rb","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-ft9rb","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"ctlog-createtree-job\" not found"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-znq6p","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"ctlog\" not found"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"ctlog\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"ctlog\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"ctlog\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-redis\" is referring to an unknown secret \"redis-password-trusted-artifact-signer7zpgm\""} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"enable-tls\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-redis\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-redis\" is referring to an unknown secret \"redis-password-trusted-artifact-signer7zpgm\""} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"enable-tls\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-redis\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-server\" is referring to an unknown secret \"redis-password-trusted-artifact-signer7zpgm\""} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor\" not found"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-server\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-server\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tuf\" not found"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:17:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:17:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:17:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:17:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:18:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:18:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:18:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:18:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:18:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:18:03.205723 1 request.go:752] "Waited before sending request" delay="1.863819141s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg1MDYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-service-controller-manager\" not found"} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:18:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"info","ts":"2026-04-24T19:18:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:18:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:18:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:18:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:18:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-04-24T19:18:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:19:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:19:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:19:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:19:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:19:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:19:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:19:07.246711 1 request.go:752] "Waited before sending request" delay="1.258120086s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkyNjIsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:19:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:19:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:19:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:19:19.247130 1 request.go:752] "Waited before sending request" delay="1.992042339s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkzNzIsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:19:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:19:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,batch.kubernetes.io/job-name=create-importers,controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,job-name=create-importers"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,batch.kubernetes.io/job-name=migrate-db,controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,job-name=migrate-db"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,batch.kubernetes.io/job-name=create-db,controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,job-name=create-db"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:19:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:19:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:19:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:19:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:19:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:19:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:19:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:19:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:19:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:19:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:19:31.247006 1 request.go:752] "Waited before sending request" delay="1.858605413s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjk1MjYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:19:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:19:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:19:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:19:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:19:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:19:41.247048 1 request.go:752] "Waited before sending request" delay="1.865906124s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjk2MzcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:19:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:19:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:19:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:19:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:19:53.246897 1 request.go:752] "Waited before sending request" delay="1.86227499s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjk3NzYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:19:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:19:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:19:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:19:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:19:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:20:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:20:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:20:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:20:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:20:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:20:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:20:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:20:05.246301 1 request.go:752] "Waited before sending request" delay="1.864695797s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjk5NTAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:20:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:20:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:20:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:20:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:20:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:20:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:20:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:20:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:20:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:20:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:20:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:20:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:21:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:21:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:21:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:21:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:21:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:21:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:21:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:21:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:21:07.278621 1 request.go:752] "Waited before sending request" delay="1.232383663s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA2NzcsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:21:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:21:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:21:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:21:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:21:19.279609 1 request.go:752] "Waited before sending request" delay="1.995050992s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA3ODEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-04-24T19:21:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:21:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:21:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:21:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:21:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:21:31.278010 1 request.go:752] "Waited before sending request" delay="1.992152821s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA5MDYsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:21:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:21:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:21:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:21:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:21:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:21:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:21:41.279579 1 request.go:752] "Waited before sending request" delay="1.994045366s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzEwMjksInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,batch.kubernetes.io/job-name=create-db,controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,job-name=create-db"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,batch.kubernetes.io/job-name=create-importers,controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,job-name=create-importers"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,batch.kubernetes.io/job-name=migrate-db,controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,job-name=migrate-db"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:21:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:21:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:21:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:21:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:21:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:21:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:21:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:21:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:21:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:21:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:21:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:21:53.278446 1 request.go:752] "Waited before sending request" delay="1.992555443s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzExNTMsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:21:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:21:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:21:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:21:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:21:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:21:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:21:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:21:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:21:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:21:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:21:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:22:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:22:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:22:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:22:05.278336 1 request.go:752] "Waited before sending request" delay="1.857222184s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzEzMzIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:22:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:22:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:22:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:22:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:22:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:23:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:23:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:23:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:23:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:23:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:23:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:23:07.207468 1 request.go:752] "Waited before sending request" delay="1.252391719s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIwMzcsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:23:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:23:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:23:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:23:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:23:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:23:17.207713 1 request.go:752] "Waited before sending request" delay="1.873918311s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIxNTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:23:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:23:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:23:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:23:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:23:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:23:29.208005 1 request.go:752] "Waited before sending request" delay="1.994282959s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-managed-tenant-a31pp/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIyNjYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-04-24T19:23:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:23:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:23:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:23:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:23:41.208039 1 request.go:752] "Waited before sending request" delay="1.993227218s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIzOTQsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:23:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:23:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:23:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:23:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:23:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:23:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:23:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:23:51.208311 1 request.go:752] "Waited before sending request" delay="1.865920013s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/namespace-lister/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI1MzAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:23:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:23:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:23:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:23:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:23:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:23:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:23:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,batch.kubernetes.io/job-name=create-db,controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,job-name=create-db"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,batch.kubernetes.io/job-name=create-importers,controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,job-name=create-importers"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,batch.kubernetes.io/job-name=migrate-db,controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,job-name=migrate-db"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:23:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:23:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:23:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:23:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:23:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:23:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:23:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:23:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:23:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:23:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:23:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:24:03.207058 1 request.go:752] "Waited before sending request" delay="1.993858079s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI2NDAsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:24:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:24:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:24:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:24:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:24:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:25:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:25:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:25:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:25:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:25:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:25:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:25:07.174042 1 request.go:752] "Waited before sending request" delay="1.489023551s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/namespace-lister/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM0MTIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,batch.kubernetes.io/job-name=create-db,controller-uid=59226e0e-ea57-47c7-a26e-b3dae87e2c5d,job-name=create-db"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,batch.kubernetes.io/job-name=create-importers,controller-uid=c5a8c289-8b2b-428c-a262-88e23bab7521,job-name=create-importers"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,batch.kubernetes.io/job-name=migrate-db,controller-uid=adebdce2-ff86-4b9f-ae79-226fd6825802,job-name=migrate-db"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:25:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:25:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:25:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:25:17.174090 1 request.go:752] "Waited before sending request" delay="1.884941472s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM1MjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:25:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:25:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:25:24Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:25:24Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:25:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:25:27.174114 1 request.go:752] "Waited before sending request" delay="1.8970149s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM2NDMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:25:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:25:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:25:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:25:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:25:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:25:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:25:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:25:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:25:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:25:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:25:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:25:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:25:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:25:39.174820 1 request.go:752] "Waited before sending request" delay="1.898946018s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM3MzksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:25:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:25:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:25:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:25:49.175003 1 request.go:752] "Waited before sending request" delay="1.900924304s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM4MjksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:25:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:25:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:25:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:25:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:25:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:25:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:25:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:25:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:25:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:25:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:25:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:25:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:26:01.174883 1 request.go:752] "Waited before sending request" delay="1.99505505s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM5MjEsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:26:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:26:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:26:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:26:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:26:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:27:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:27:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:27:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:27:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:27:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:27:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:27:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:27:07.176517 1 request.go:752] "Waited before sending request" delay="1.494039867s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ1MzMsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:27:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:27:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:27:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:27:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:27:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:27:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:27:19.177005 1 request.go:752] "Waited before sending request" delay="1.889878225s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ2MzAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:27:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:27:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:27:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:27:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:27:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:27:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:27:29.177034 1 request.go:752] "Waited before sending request" delay="1.900490969s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ3MTIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:27:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:27:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:27:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:27:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:27:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:27:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:27:41.177433 1 request.go:752] "Waited before sending request" delay="1.902954289s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-managed-tenant-a31pp/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ4MTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-04-24T19:27:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:27:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:27:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:27:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:27:53.175810 1 request.go:752] "Waited before sending request" delay="1.898068742s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ5MTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:27:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:27:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:27:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:27:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:27:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:27:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:28:03.176592 1 request.go:752] "Waited before sending request" delay="1.994000864s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ5ODksInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:28:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:28:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:28:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:28:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:28:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:28:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:28:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:28:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:28:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:28:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:29:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:29:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:29:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:29:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:29:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:29:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:29:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:29:07.213049 1 request.go:752] "Waited before sending request" delay="1.282851017s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU2MDAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:29:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:29:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:29:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:29:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:29:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:29:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:29:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:29:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:29:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:29:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:29:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:29:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:29:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:29:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:29:17.213095 1 request.go:752] "Waited before sending request" delay="1.992919203s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU2NTksInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:29:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:29:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:29:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:29:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:29:29.214007 1 request.go:752] "Waited before sending request" delay="1.996036268s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU3NzksInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-04-24T19:29:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:29:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:29:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:29:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:29:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:29:39.214001 1 request.go:752] "Waited before sending request" delay="1.902868242s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU4NzIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:29:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:29:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:29:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:29:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:29:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:29:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:29:51.214012 1 request.go:752] "Waited before sending request" delay="1.995007924s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU5NzEsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:29:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:29:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:29:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:29:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:29:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:29:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:29:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:29:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:29:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:29:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:29:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:29:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:30:01.214664 1 request.go:752] "Waited before sending request" delay="1.844908025s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYwNjksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:30:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:30:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:30:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:30:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:31:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:31:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:31:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:31:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:31:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:31:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:31:07.178804 1 request.go:752] "Waited before sending request" delay="1.400291438s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzY5OTcsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:31:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:31:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:31:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:31:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:31:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:31:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:31:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:31:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:31:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:31:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:31:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:31:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:31:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:31:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:31:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:31:17.179153 1 request.go:752] "Waited before sending request" delay="1.897243216s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzcxNTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:31:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:31:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:31:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:31:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:31:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:31:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:31:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:31:29.179414 1 request.go:752] "Waited before sending request" delay="1.995049297s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-managed-tenant-a31pp/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc0MDYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-04-24T19:31:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:31:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:31:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:31:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:31:41.180192 1 request.go:752] "Waited before sending request" delay="1.99604374s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc2NzMsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72942461492,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=227,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f8a34430b2e00c5986e8ca54e274a4a3be241937,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-72b4v,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-72b4v,tekton.dev/pipelineRunUID=e7e58a70-abf3-427a-870a-c22af26f28cc,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-72b4v-init,tekton.dev/taskRunUID=1d8c87c3-be14-49bf-877c-63c784a4bb9b,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-72b4v-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:31:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"info","ts":"2026-04-24T19:31:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:31:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:31:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:31:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:31:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:31:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:31:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:31:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:31:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:31:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:31:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:31:53.178606 1 request.go:752] "Waited before sending request" delay="1.858121438s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc5MTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:31:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:31:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:31:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:31:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:31:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:31:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:31:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:31:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:31:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:31:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:31:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:32:03.178715 1 request.go:752] "Waited before sending request" delay="1.992912187s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzgwMzksInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:32:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:32:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:32:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:32:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:32:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:33:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:33:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:33:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:33:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:33:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:33:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:33:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:33:07.201033 1 request.go:752] "Waited before sending request" delay="1.248540545s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg4MjMsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:33:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:33:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:33:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:33:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:33:17.201078 1 request.go:752] "Waited before sending request" delay="1.879055641s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg5MTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:33:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:33:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:33:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:33:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"info","ts":"2026-04-24T19:33:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:33:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:33:29.202245 1 request.go:752] "Waited before sending request" delay="1.874928403s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzkwMTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:33:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:33:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:33:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:33:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:33:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:33:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:33:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:33:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:33:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:33:41.202020 1 request.go:752] "Waited before sending request" delay="1.994584269s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzkxMDIsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:33:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:33:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:33:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:33:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:33:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:33:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:33:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:33:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:33:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:33:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:33:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:33:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:33:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:33:53.201038 1 request.go:752] "Waited before sending request" delay="1.88234724s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzkyMjQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:33:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:33:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:33:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:33:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:33:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:33:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:33:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:33:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:33:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:33:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:33:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:33:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:34:03.201762 1 request.go:752] "Waited before sending request" delay="1.992758887s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzkyOTYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:34:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:34:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:34:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:34:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:34:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:34:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:35:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:35:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:35:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:35:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:35:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:35:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:35:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:35:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:35:07.279020 1 request.go:752] "Waited before sending request" delay="1.289558812s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDA1NzIsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:35:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:35:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:35:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:35:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:35:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:35:17.279303 1 request.go:752] "Waited before sending request" delay="1.889932282s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDA3MTAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-04-24T19:35:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:35:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:35:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:35:27.279580 1 request.go:752] "Waited before sending request" delay="1.994335672s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDA5MDEsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-image-manifests\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:35:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"info","ts":"2026-04-24T19:35:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:35:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:35:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:35:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:35:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:35:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:35:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:35:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:35:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:35:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:35:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:35:39.280023 1 request.go:752] "Waited before sending request" delay="1.852839997s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDExNjQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:35:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:35:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:35:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:35:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:35:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:35:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:35:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:35:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:35:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:35:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:35:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:35:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:35:51.279088 1 request.go:752] "Waited before sending request" delay="1.862150736s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDEyODMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:35:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:35:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:35:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:35:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:35:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:35:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:35:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:35:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:35:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:35:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:35:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:35:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:36:01.280139 1 request.go:752] "Waited before sending request" delay="1.87193748s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE0NzEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:36:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:36:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:36:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:36:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:36:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:36:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:36:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:36:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:37:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:37:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:37:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:37:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:37:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:37:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:37:07.200138 1 request.go:752] "Waited before sending request" delay="1.328321921s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDIyMzIsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:37:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:37:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:37:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-image-manifests\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-unicode-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-unicode-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:37:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"info","ts":"2026-04-24T19:37:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:37:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:37:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:37:19.200038 1 request.go:752] "Waited before sending request" delay="1.993512184s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDIzMjMsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:37:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:37:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:37:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:37:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:37:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:37:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:37:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:37:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:37:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:37:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:37:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:37:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:37:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:37:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:37:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:37:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:37:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:37:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:37:31.201025 1 request.go:752] "Waited before sending request" delay="1.855853444s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI0MzQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:37:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:37:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:37:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:37:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:37:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:37:43.200075 1 request.go:752] "Waited before sending request" delay="1.993330552s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI1MjYsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:37:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:37:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:37:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:37:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:37:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:37:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:37:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:37:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:37:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:37:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:37:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:37:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:37:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:37:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:37:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:37:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:37:55.199344 1 request.go:752] "Waited before sending request" delay="1.782008179s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI2NTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:37:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:37:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:38:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:38:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:38:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:38:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:38:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:38:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:38:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:38:05.199927 1 request.go:752] "Waited before sending request" delay="1.868671388s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI3NTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:38:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:38:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:38:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:38:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:38:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:38:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:38:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:38:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:38:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:38:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:38:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:38:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:39:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:39:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:39:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:39:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:39:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:39:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:39:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:39:07.200462 1 request.go:752] "Waited before sending request" delay="1.322427453s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM4MDcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:39:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:39:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:39:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clone-repository,tekton.dev/taskRunUID=413fc191-21fd-4a6f-a249-c2e344159a26"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-init,tekton.dev/taskRunUID=4dda03ee-be6a-4675-879e-d54fd9d006ca"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-prefetch-dependencies,tekton.dev/taskRunUID=995d0118-c642-42e0-a856-ee771cadfc5d"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-image-manifests\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72943396603,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=228,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=a3e730b38c60afd2dec563b389aff5986b6aee88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRunUID=9236d345-855c-4b50-bd4c-67fa2e0d15e6,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-lp5bj-init,tekton.dev/taskRunUID=69b3dda4-b826-4aef-85b2-307bff01b0f5,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-pull-request-lp5bj-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-image-manifests\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-q64gp-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:39:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:39:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:39:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:39:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:39:19.200200 1 request.go:752] "Waited before sending request" delay="1.992652125s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM5MDUsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:39:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:39:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:39:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:39:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:39:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:39:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:39:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:39:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:39:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:39:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:39:29.201614 1 request.go:752] "Waited before sending request" delay="1.995052967s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQwODEsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:39:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:39:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:39:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:39:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:39:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:39:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:39:41.201003 1 request.go:752] "Waited before sending request" delay="1.860086594s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQzMDAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:39:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:39:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:39:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:39:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:39:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:39:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:39:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:39:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:39:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:39:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:39:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:39:51.201686 1 request.go:752] "Waited before sending request" delay="1.994939715s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ0NTIsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:39:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:39:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:39:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:39:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:39:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:39:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:40:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:40:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:40:03.200844 1 request.go:752] "Waited before sending request" delay="1.866427751s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ1OTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:40:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:40:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:40:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:40:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:40:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:40:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:40:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:40:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:40:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:40:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:40:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:40:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:40:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:40:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:40:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:40:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:40:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:41:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:41:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:41:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:41:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:41:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:41:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:41:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:41:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:41:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:41:06Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:41:06Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:41:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:41:09.215031 1 request.go:752] "Waited before sending request" delay="1.994388664s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU5MzYsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:41:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:41:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:41:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:41:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-d268ee637e,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,controller-revision-hash=affinity-assistant-d268ee637e-67fd58bf65,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-d268ee637e-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-d268ee637e","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-d268ee637e","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-d268ee637e","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-d268ee637e","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-d268ee637e","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=check-data-keys,tekton.dev/task=check-data-keys,tekton.dev/taskRun=managed-gpbtj-check-data-keys,tekton.dev/taskRunUID=c73f3ebd-94d1-421e-8d0c-b9d8ec7738c1"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-data,tekton.dev/task=collect-data,tekton.dev/taskRun=managed-gpbtj-collect-data,tekton.dev/taskRunUID=b2e616ac-1cbe-4244-89ca-f3e5b6c83b10"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-registry-token-secret,tekton.dev/task=collect-registry-token-secret,tekton.dev/taskRun=managed-gpbtj-collect-registry-token-secret,tekton.dev/taskRunUID=9114ef2b-eda7-44bf-ba1b-9b51b4551f69"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-signing-params,tekton.dev/task=collect-signing-params,tekton.dev/taskRun=managed-gpbtj-collect-signing-params,tekton.dev/taskRunUID=d73c656d-b464-4160-a21d-a07fd9c07946"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-signing-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-task-params,tekton.dev/task=collect-task-params,tekton.dev/taskRun=managed-gpbtj-collect-task-params,tekton.dev/taskRunUID=942d532b-1319-4210-b195-2808fa01403c"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-gpbtj-verify-access-to-resources,tekton.dev/taskRunUID=d0e1a425-429e-4880-af7f-37d6825538df"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-d268ee637e,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-managed-tenant-a31pp"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=reduce-snapshot,tekton.dev/task=reduce-snapshot,tekton.dev/taskRun=managed-gpbtj-reduce-snapshot,tekton.dev/taskRunUID=491ba088-fe9e-4f28-8e35-e70204a3576c"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-reduce-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"info","ts":"2026-04-24T19:41:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:41:21.215003 1 request.go:752] "Waited before sending request" delay="1.993994495s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDYyMjgsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-04-24T19:41:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:41:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:41:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=72942493806,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-demo-comp-on-push,pac.test.appstudio.openshift.io/repository=tsf-demo-comp,pac.test.appstudio.openshift.io/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-umgx-s46sv,tekton.dev/pipelineRunUID=2d5213d7-997b-47d2-99f7-0cc05e709f91,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-umgx-s46sv-collect-keyless-params,tekton.dev/taskRunUID=1103dc76-0d7a-4456-8c29-244ed4d5bf1b,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1777059620,test.appstudio.openshift.io/scenario=my-integration-test-umgx,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=72942415317,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-demo-comp-on-push,pac.test.appstudio.openshift.io/repository=tsf-demo-comp,pac.test.appstudio.openshift.io/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-umgx-zvznh,tekton.dev/pipelineRunUID=265c5b06-755f-440d-bad5-b35a1fa8295e,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-umgx-zvznh-verify,tekton.dev/taskRunUID=871e8928-50e2-4340-843c-eea01c4c8e2c,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1777059567,test.appstudio.openshift.io/scenario=my-integration-test-umgx,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-zvznh-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-image-manifests\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=72942493806,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-demo-comp-on-push,pac.test.appstudio.openshift.io/repository=tsf-demo-comp,pac.test.appstudio.openshift.io/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-umgx-s46sv,tekton.dev/pipelineRunUID=2d5213d7-997b-47d2-99f7-0cc05e709f91,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-umgx-s46sv-verify,tekton.dev/taskRunUID=4af4a42a-9dea-4b03-bd68-24168fb42ec1,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1777059620,test.appstudio.openshift.io/scenario=my-integration-test-umgx,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-umgx-s46sv-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clone-repository,tekton.dev/taskRunUID=413fc191-21fd-4a6f-a249-c2e344159a26"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-container,tekton.dev/taskRunUID=dfd3d545-824c-4472-b0d5-06fb608d3da4"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-image-index,tekton.dev/taskRunUID=7d4707f6-c349-435a-aef5-a10b7a4a341d"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-init,tekton.dev/taskRunUID=4dda03ee-be6a-4675-879e-d54fd9d006ca"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-prefetch-dependencies,tekton.dev/taskRunUID=995d0118-c642-42e0-a856-ee771cadfc5d"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-jh77t-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72943396603,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=228,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=a3e730b38c60afd2dec563b389aff5986b6aee88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRunUID=9236d345-855c-4b50-bd4c-67fa2e0d15e6,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-lp5bj-init,tekton.dev/taskRunUID=69b3dda4-b826-4aef-85b2-307bff01b0f5,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=72942415317,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-demo-comp-on-push,pac.test.appstudio.openshift.io/repository=tsf-demo-comp,pac.test.appstudio.openshift.io/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-umgx-zvznh,tekton.dev/pipelineRunUID=265c5b06-755f-440d-bad5-b35a1fa8295e,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-umgx-zvznh-collect-keyless-params,tekton.dev/taskRunUID=7b99aab7-a7c8-4eca-923d-800c51e5248b,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1777059567,test.appstudio.openshift.io/scenario=my-integration-test-umgx,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:41:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:41:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:41:33.213928 1 request.go:752] "Waited before sending request" delay="1.985606675s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY1NDQsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:41:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:41:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:41:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:41:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:41:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:41:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:41:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:41:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:41:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:41:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:41:43.214837 1 request.go:752] "Waited before sending request" delay="1.99292522s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY5ODMsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:41:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:41:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:41:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:41:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:41:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:41:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:41:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:41:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:41:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:41:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:41:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:41:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:41:55.214057 1 request.go:752] "Waited before sending request" delay="1.995110867s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc0MTgsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:41:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:41:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:41:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:42:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:42:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:42:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:42:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:42:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:42:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:42:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:42:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:42:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:42:05.214204 1 request.go:752] "Waited before sending request" delay="1.994668519s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc2OTksInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:42:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:42:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:42:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:42:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:43:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:43:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:43:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:43:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:43:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:43:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:43:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:43:07.192139 1 request.go:752] "Waited before sending request" delay="1.387568759s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDg5NTUsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:43:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:43:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:43:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:43:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:43:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:43:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:43:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:43:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:43:17.192275 1 request.go:752] "Waited before sending request" delay="1.893843574s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDkyMTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:43:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:43:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:43:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:43:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:43:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:43:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:43:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:43:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:43:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:43:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:43:29.193028 1 request.go:752] "Waited before sending request" delay="1.886693621s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk0MzcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:43:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:43:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:43:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:43:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:43:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:43:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:43:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:43:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:43:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:43:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:43:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:43:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:43:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:43:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:43:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:43:39.193357 1 request.go:752] "Waited before sending request" delay="1.996045238s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk1OTMsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:43:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:43:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:43:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:43:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-bvngj-verify-access-to-resources,tekton.dev/taskRunUID=fec264e2-8cce-4fd0-8487-913802cdb257"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=filter-already-released-images,tekton.dev/task=filter-already-released-images,tekton.dev/taskRun=managed-gpbtj-filter-already-released-images,tekton.dev/taskRunUID=08b31ddc-2867-4f6b-9271-09758dd6e273"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=update-cr-status,tekton.dev/task=update-cr-status,tekton.dev/taskRun=managed-gpbtj-update-cr-status,tekton.dev/taskRunUID=81c1e4c6-6e17-4a25-8384-c186d6bf1eef"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-update-cr-status-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=apply-mapping,tekton.dev/task=apply-mapping,tekton.dev/taskRun=managed-bvngj-apply-mapping,tekton.dev/taskRunUID=c7bd555a-9a7a-454e-a4a4-571313e7bee2"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=update-cr-status,tekton.dev/task=update-cr-status,tekton.dev/taskRun=managed-bvngj-update-cr-status,tekton.dev/taskRunUID=0b70fe21-d56d-48b8-93a8-157882e4d22a"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-update-cr-status-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-tpa-params,tekton.dev/task=collect-tpa-params,tekton.dev/taskRun=managed-gpbtj-collect-tpa-params,tekton.dev/taskRunUID=cb6c7244-9e02-496a-a8bd-597d64f791b3"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-tpa-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=check-data-keys,tekton.dev/task=check-data-keys,tekton.dev/taskRun=managed-bvngj-check-data-keys,tekton.dev/taskRunUID=579326ea-f933-43f7-ba6b-ab584a19a1d3"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-data,tekton.dev/task=collect-data,tekton.dev/taskRun=managed-gpbtj-collect-data,tekton.dev/taskRunUID=b2e616ac-1cbe-4244-89ca-f3e5b6c83b10"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-managed-tenant-a31pp"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=push-snapshot,tekton.dev/task=push-snapshot,tekton.dev/taskRun=managed-gpbtj-push-snapshot,tekton.dev/taskRunUID=4cfff329-d13a-4b3b-9754-927aae825025"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-push-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=sign-image-cosign-keyless,tekton.dev/task=sign-image-cosign-keyless,tekton.dev/taskRun=managed-gpbtj-sign-image-cosign-keyless,tekton.dev/taskRunUID=dc341287-e7d8-4ab3-a9e9-02412c719e2a"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-3edeaa84a0,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"affinity-assistant-3edeaa84a0","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-d268ee637e,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-managed-tenant-a31pp"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-task-params,tekton.dev/task=collect-task-params,tekton.dev/taskRun=managed-gpbtj-collect-task-params,tekton.dev/taskRunUID=942d532b-1319-4210-b195-2808fa01403c"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-collect-task-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=collect-task-params,tekton.dev/task=collect-task-params,tekton.dev/taskRun=managed-bvngj-collect-task-params,tekton.dev/taskRunUID=e4ca108e-27bf-47c9-9ed8-e31d28eea4d0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-registry-token-secret,tekton.dev/task=collect-registry-token-secret,tekton.dev/taskRun=managed-gpbtj-collect-registry-token-secret,tekton.dev/taskRunUID=9114ef2b-eda7-44bf-ba1b-9b51b4551f69"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-managed-tenant-a31pp"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=collect-signing-params,tekton.dev/task=collect-signing-params,tekton.dev/taskRun=managed-gpbtj-collect-signing-params,tekton.dev/taskRunUID=d73c656d-b464-4160-a21d-a07fd9c07946"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=collect-data,tekton.dev/task=collect-data,tekton.dev/taskRun=managed-bvngj-collect-data,tekton.dev/taskRunUID=b08c06b2-96a6-4d97-b85e-fa946f2e807e"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=collect-signing-params,tekton.dev/task=collect-signing-params,tekton.dev/taskRun=managed-bvngj-collect-signing-params,tekton.dev/taskRunUID=c61f2c20-1cf8-486f-aeea-2136de4486ab"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=verify-conforma,tekton.dev/task=verify-conforma-konflux-ta,tekton.dev/taskRun=managed-bvngj-verify-conforma,tekton.dev/taskRunUID=2a64a123-ba1b-4b15-9990-f4ca73b99fee"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=apply-mapping,tekton.dev/task=apply-mapping,tekton.dev/taskRun=managed-gpbtj-apply-mapping,tekton.dev/taskRunUID=47202509-687d-4a70-8491-ad7b06baec3c"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=check-data-keys,tekton.dev/task=check-data-keys,tekton.dev/taskRun=managed-gpbtj-check-data-keys,tekton.dev/taskRunUID=c73f3ebd-94d1-421e-8d0c-b9d8ec7738c1"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-gpbtj-verify-access-to-resources,tekton.dev/taskRunUID=d0e1a425-429e-4880-af7f-37d6825538df"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-managed-tenant-a31pp"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=verify-conforma,tekton.dev/task=verify-conforma-konflux-ta,tekton.dev/taskRun=managed-gpbtj-verify-conforma,tekton.dev/taskRunUID=9adc6f4d-a448-4148-b2fd-fcf82412a3a3"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-gpbtj-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=collect-tpa-params,tekton.dev/task=collect-tpa-params,tekton.dev/taskRun=managed-bvngj-collect-tpa-params,tekton.dev/taskRunUID=b2dd0228-a220-49ee-83c3-a9308444f252"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=filter-already-released-images,tekton.dev/task=filter-already-released-images,tekton.dev/taskRun=managed-bvngj-filter-already-released-images,tekton.dev/taskRunUID=e233af19-aaea-4427-9ce1-cf611b87df11"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.2.0,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=process-component-sbom,tekton.dev/task=augment-component-sboms-ta,tekton.dev/taskRun=managed-gpbtj-process-component-sbom,tekton.dev/taskRunUID=9c8988bc-904e-49c6-b93c-2510c978d297"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj,tekton.dev/pipelineRunUID=6fde82da-21f2-4059-b7e5-d037f0ea0ca5,tekton.dev/pipelineTask=reduce-snapshot,tekton.dev/task=reduce-snapshot,tekton.dev/taskRun=managed-gpbtj-reduce-snapshot,tekton.dev/taskRunUID=491ba088-fe9e-4f28-8e35-e70204a3576c"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=sign-image-cosign-keyless,tekton.dev/task=sign-image-cosign-keyless,tekton.dev/taskRun=managed-bvngj-sign-image-cosign-keyless,tekton.dev/taskRunUID=1fe573f6-2d33-4732-b0c4-c06333dc8bd2"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-3edeaa84a0,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,controller-revision-hash=affinity-assistant-3edeaa84a0-74795d8b89,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-3edeaa84a0-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-d268ee637e,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,controller-revision-hash=affinity-assistant-d268ee637e-67fd58bf65,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193056-000-4f62f53-k48rf,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-d268ee637e-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-gpbtj"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-managed-tenant-a31pp"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=collect-registry-token-secret,tekton.dev/task=collect-registry-token-secret,tekton.dev/taskRun=managed-bvngj-collect-registry-token-secret,tekton.dev/taskRunUID=fe6c242e-f5a6-4330-bd00-61cb539ccb9b"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.2.0,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=process-component-sbom,tekton.dev/task=augment-component-sboms-ta,tekton.dev/taskRun=managed-bvngj-process-component-sbom,tekton.dev/taskRunUID=25de3f67-9576-4bf2-a2e6-04675feba111"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=push-snapshot,tekton.dev/task=push-snapshot,tekton.dev/taskRun=managed-bvngj-push-snapshot,tekton.dev/taskRunUID=c6bc1491-3f8e-4617-bbbc-a302b3b132cb"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-managed-tenant-a31pp","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-demo-app-20260424-193130-000-f74e3c4-rtsdn,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-bvngj,tekton.dev/pipelineRunUID=f1905a41-664e-4197-96b0-2547c2037403,tekton.dev/pipelineTask=reduce-snapshot,tekton.dev/task=reduce-snapshot,tekton.dev/taskRun=managed-bvngj-reduce-snapshot,tekton.dev/taskRunUID=f58aecb1-7877-4a63-92ae-103820154068"} {"level":"debug","ts":"2026-04-24T19:43:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-managed-tenant-a31pp","object":"managed-bvngj-reduce-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"info","ts":"2026-04-24T19:43:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:43:51.193043 1 request.go:752] "Waited before sending request" delay="1.995976219s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk3MzcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-04-24T19:43:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:43:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:43:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clone-repository,tekton.dev/taskRunUID=413fc191-21fd-4a6f-a249-c2e344159a26"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72943396603,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=228,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=a3e730b38c60afd2dec563b389aff5986b6aee88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRunUID=9236d345-855c-4b50-bd4c-67fa2e0d15e6,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-lp5bj-init,tekton.dev/taskRunUID=69b3dda4-b826-4aef-85b2-307bff01b0f5,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-image-index,tekton.dev/taskRunUID=7d4707f6-c349-435a-aef5-a10b7a4a341d"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clair-scan,tekton.dev/taskRunUID=2d601b18-d22f-49c7-84ef-11dfc370f40e"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-image-manifests\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clair-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-unicode-check,tekton.dev/taskRunUID=1b60ec43-1ba8-4aa4-8498-917240164308"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-unicode-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=72942415317,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-demo-comp-on-push,pac.test.appstudio.openshift.io/repository=tsf-demo-comp,pac.test.appstudio.openshift.io/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-umgx-zvznh,tekton.dev/pipelineRunUID=265c5b06-755f-440d-bad5-b35a1fa8295e,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-umgx-zvznh-verify,tekton.dev/taskRunUID=871e8928-50e2-4340-843c-eea01c4c8e2c,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1777059567,test.appstudio.openshift.io/scenario=my-integration-test-umgx,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check,tekton.dev/taskRunUID=ea2dc494-7de4-4b3a-9abb-5a0f612ea4c1"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-rpms-signature-scan,tekton.dev/taskRunUID=ec98b78d-fc9f-4710-a945-6a700fac9f9e"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-init,tekton.dev/taskRunUID=4dda03ee-be6a-4675-879e-d54fd9d006ca"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-prefetch-dependencies,tekton.dev/taskRunUID=995d0118-c642-42e0-a856-ee771cadfc5d"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=72942493806,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-demo-comp-on-push,pac.test.appstudio.openshift.io/repository=tsf-demo-comp,pac.test.appstudio.openshift.io/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-umgx-s46sv,tekton.dev/pipelineRunUID=2d5213d7-997b-47d2-99f7-0cc05e709f91,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-umgx-s46sv-verify,tekton.dev/taskRunUID=4af4a42a-9dea-4b03-bd68-24168fb42ec1,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1777059620,test.appstudio.openshift.io/scenario=my-integration-test-umgx,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193056-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=72942415317,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-demo-comp-on-push,pac.test.appstudio.openshift.io/repository=tsf-demo-comp,pac.test.appstudio.openshift.io/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-umgx-zvznh,tekton.dev/pipelineRunUID=265c5b06-755f-440d-bad5-b35a1fa8295e,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-umgx-zvznh-collect-keyless-params,tekton.dev/taskRunUID=7b99aab7-a7c8-4eca-923d-800c51e5248b,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1777059567,test.appstudio.openshift.io/scenario=my-integration-test-umgx,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-container,tekton.dev/taskRunUID=dfd3d545-824c-4472-b0d5-06fb608d3da4"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clamav-scan,tekton.dev/taskRunUID=2c5c9eff-27f7-4972-b6bc-3d0f4b4900ad"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-shell-check,tekton.dev/taskRunUID=a3581de6-794f-449d-a1b4-d6fe1d7d1787"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-shell-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-tpa-scan,tekton.dev/taskRunUID=4e502c85-4314-4df9-a9fe-4a882fe78415"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,appstudio.openshift.io/snapshot=tsf-demo-app-20260424-193130-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=72942493806,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-demo-comp-on-push,pac.test.appstudio.openshift.io/repository=tsf-demo-comp,pac.test.appstudio.openshift.io/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-umgx-s46sv,tekton.dev/pipelineRunUID=2d5213d7-997b-47d2-99f7-0cc05e709f91,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-umgx-s46sv-collect-keyless-params,tekton.dev/taskRunUID=1103dc76-0d7a-4456-8c29-244ed4d5bf1b,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1777059620,test.appstudio.openshift.io/scenario=my-integration-test-umgx,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-04-24T19:43:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:43:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:44:03.192219 1 request.go:752] "Waited before sending request" delay="1.99513834s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk4ODYsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:44:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:44:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:44:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:44:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:44:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:44:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:44:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:44:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:44:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:44:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:44:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:44:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:45:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:45:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:45:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:45:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:45:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:45:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:45:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:45:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:45:07.176654 1 request.go:752] "Waited before sending request" delay="1.157584243s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE3MDksInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-rpms-signature-scan,tekton.dev/taskRunUID=ec98b78d-fc9f-4710-a945-6a700fac9f9e"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-container,tekton.dev/taskRunUID=dfd3d545-824c-4472-b0d5-06fb608d3da4"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clair-scan,tekton.dev/taskRunUID=2d601b18-d22f-49c7-84ef-11dfc370f40e"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clone-repository,tekton.dev/taskRunUID=413fc191-21fd-4a6f-a249-c2e344159a26"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-init,tekton.dev/taskRunUID=4dda03ee-be6a-4675-879e-d54fd9d006ca"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-image-index,tekton.dev/taskRunUID=7d4707f6-c349-435a-aef5-a10b7a4a341d"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-unicode-check,tekton.dev/taskRunUID=1b60ec43-1ba8-4aa4-8498-917240164308"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clamav-scan,tekton.dev/taskRunUID=2c5c9eff-27f7-4972-b6bc-3d0f4b4900ad"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check,tekton.dev/taskRunUID=ea2dc494-7de4-4b3a-9abb-5a0f612ea4c1"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72943396603,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=228,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=a3e730b38c60afd2dec563b389aff5986b6aee88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRunUID=9236d345-855c-4b50-bd4c-67fa2e0d15e6,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-lp5bj-init,tekton.dev/taskRunUID=69b3dda4-b826-4aef-85b2-307bff01b0f5,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-tpa-scan,tekton.dev/taskRunUID=4e502c85-4314-4df9-a9fe-4a882fe78415"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-prefetch-dependencies,tekton.dev/taskRunUID=995d0118-c642-42e0-a856-ee771cadfc5d"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-shell-check,tekton.dev/taskRunUID=a3581de6-794f-449d-a1b4-d6fe1d7d1787"} {"level":"debug","ts":"2026-04-24T19:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:45:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:45:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:45:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:45:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:45:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:45:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:45:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:45:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:45:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:45:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:45:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:45:19.176883 1 request.go:752] "Waited before sending request" delay="1.88566199s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE4MTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:45:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:45:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:45:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:45:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:45:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:45:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:45:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:45:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:45:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:45:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:45:29.176907 1 request.go:752] "Waited before sending request" delay="1.994776131s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE4OTYsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:45:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:45:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:45:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:45:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:45:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:45:39.177034 1 request.go:752] "Waited before sending request" delay="1.995407435s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE5NzgsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:45:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:45:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:45:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:45:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:45:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:45:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:45:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:45:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:45:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:45:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:45:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:45:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:45:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:45:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:45:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:45:51.177023 1 request.go:752] "Waited before sending request" delay="1.823170987s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTIxMDcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:45:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:45:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:45:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:45:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:45:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:45:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:45:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:46:03.175956 1 request.go:752] "Waited before sending request" delay="1.993952656s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTIxOTYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:46:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:46:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:46:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:46:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:46:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:46:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:46:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:46:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:46:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:46:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:46:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:46:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:47:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:47:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:47:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:47:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:47:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:47:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:47:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:47:07.182011 1 request.go:752] "Waited before sending request" delay="1.389615732s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI4MjUsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:47:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:47:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:47:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:47:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:47:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:47:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:47:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:47:19.182173 1 request.go:752] "Waited before sending request" delay="1.803501569s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI5MTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:47:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:47:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:47:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:47:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:47:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:47:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:47:29.183001 1 request.go:752] "Waited before sending request" delay="1.881251286s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTMwMTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:47:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:47:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:47:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:47:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:47:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:47:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:47:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:47:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:47:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:47:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:47:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:47:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:47:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:47:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:47:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:47:39.183277 1 request.go:752] "Waited before sending request" delay="1.995050944s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTMxMjYsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:47:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:47:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:47:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:47:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:47:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:47:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:47:51.182932 1 request.go:752] "Waited before sending request" delay="1.994168677s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTMyMzMsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:47:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72943396603,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=228,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=a3e730b38c60afd2dec563b389aff5986b6aee88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRunUID=9236d345-855c-4b50-bd4c-67fa2e0d15e6,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-lp5bj-init,tekton.dev/taskRunUID=69b3dda4-b826-4aef-85b2-307bff01b0f5,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-container,tekton.dev/taskRunUID=dfd3d545-824c-4472-b0d5-06fb608d3da4"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-tpa-scan,tekton.dev/taskRunUID=4e502c85-4314-4df9-a9fe-4a882fe78415"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clair-scan,tekton.dev/taskRunUID=2d601b18-d22f-49c7-84ef-11dfc370f40e"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clone-repository,tekton.dev/taskRunUID=413fc191-21fd-4a6f-a249-c2e344159a26"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-image-index,tekton.dev/taskRunUID=7d4707f6-c349-435a-aef5-a10b7a4a341d"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-init,tekton.dev/taskRunUID=4dda03ee-be6a-4675-879e-d54fd9d006ca"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-rpms-signature-scan,tekton.dev/taskRunUID=ec98b78d-fc9f-4710-a945-6a700fac9f9e"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-shell-check,tekton.dev/taskRunUID=a3581de6-794f-449d-a1b4-d6fe1d7d1787"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check,tekton.dev/taskRunUID=ea2dc494-7de4-4b3a-9abb-5a0f612ea4c1"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-prefetch-dependencies,tekton.dev/taskRunUID=995d0118-c642-42e0-a856-ee771cadfc5d"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clamav-scan,tekton.dev/taskRunUID=2c5c9eff-27f7-4972-b6bc-3d0f4b4900ad"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-demo-comp\" not found"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-demo-comp-on-push-4ffkq-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-unicode-check,tekton.dev/taskRunUID=1b60ec43-1ba8-4aa4-8498-917240164308"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:47:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:47:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:47:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:47:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:48:03.182028 1 request.go:752] "Waited before sending request" delay="1.994133248s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTMzNDcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:48:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:48:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:48:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:48:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:48:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:48:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:48:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:48:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:48:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:49:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:49:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:49:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:49:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:49:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:49:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:49:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:49:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:49:07.175938 1 request.go:752] "Waited before sending request" delay="1.32262167s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTM5NzYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:49:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:49:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:49:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:49:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:49:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:49:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:49:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:49:17.176139 1 request.go:752] "Waited before sending request" delay="1.993117837s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQwNDAsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:49:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:49:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:49:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:49:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:49:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:49:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:49:29.176740 1 request.go:752] "Waited before sending request" delay="1.994043997s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQxNDgsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clone-repository,tekton.dev/taskRunUID=413fc191-21fd-4a6f-a249-c2e344159a26"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check,tekton.dev/taskRunUID=ea2dc494-7de4-4b3a-9abb-5a0f612ea4c1"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clamav-scan,tekton.dev/taskRunUID=2c5c9eff-27f7-4972-b6bc-3d0f4b4900ad"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-prefetch-dependencies,tekton.dev/taskRunUID=995d0118-c642-42e0-a856-ee771cadfc5d"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-tpa-scan,tekton.dev/taskRunUID=4e502c85-4314-4df9-a9fe-4a882fe78415"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72943396603,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=228,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=a3e730b38c60afd2dec563b389aff5986b6aee88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRunUID=9236d345-855c-4b50-bd4c-67fa2e0d15e6,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-lp5bj-init,tekton.dev/taskRunUID=69b3dda4-b826-4aef-85b2-307bff01b0f5,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-shell-check,tekton.dev/taskRunUID=a3581de6-794f-449d-a1b4-d6fe1d7d1787"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-image-index,tekton.dev/taskRunUID=7d4707f6-c349-435a-aef5-a10b7a4a341d"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-rpms-signature-scan,tekton.dev/taskRunUID=ec98b78d-fc9f-4710-a945-6a700fac9f9e"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-init,tekton.dev/taskRunUID=4dda03ee-be6a-4675-879e-d54fd9d006ca"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-container,tekton.dev/taskRunUID=dfd3d545-824c-4472-b0d5-06fb608d3da4"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clair-scan,tekton.dev/taskRunUID=2d601b18-d22f-49c7-84ef-11dfc370f40e"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-unicode-check,tekton.dev/taskRunUID=1b60ec43-1ba8-4aa4-8498-917240164308"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:49:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:49:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:49:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:49:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:49:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:49:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:49:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:49:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:49:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:49:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:49:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:49:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:49:41.177026 1 request.go:752] "Waited before sending request" delay="1.838909131s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQyNjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:49:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:49:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:49:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:49:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:49:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:49:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:49:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:49:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:49:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:49:51.177149 1 request.go:752] "Waited before sending request" delay="1.992228478s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQzNTAsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:49:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:49:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:49:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:50:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:50:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:50:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:50:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:50:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:50:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:50:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:50:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:50:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:50:03.175522 1 request.go:752] "Waited before sending request" delay="1.848911648s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQ0ODMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:50:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:50:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:50:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:51:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:51:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:51:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:51:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:51:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:51:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:51:07.220583 1 request.go:752] "Waited before sending request" delay="1.129981329s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTUxMDgsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:51:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:51:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:51:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:51:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:51:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:51:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:51:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:51:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:51:19.221673 1 request.go:752] "Waited before sending request" delay="1.835884649s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTUyMDMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:51:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:51:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:51:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:51:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:51:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:51:31.221042 1 request.go:752] "Waited before sending request" delay="1.854903209s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTUzMTAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:51:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:51:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:51:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check,tekton.dev/taskRunUID=ea2dc494-7de4-4b3a-9abb-5a0f612ea4c1"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-tpa-scan,tekton.dev/taskRunUID=4e502c85-4314-4df9-a9fe-4a882fe78415"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72943396603,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=228,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=a3e730b38c60afd2dec563b389aff5986b6aee88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRunUID=9236d345-855c-4b50-bd4c-67fa2e0d15e6,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-lp5bj-init,tekton.dev/taskRunUID=69b3dda4-b826-4aef-85b2-307bff01b0f5,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-container,tekton.dev/taskRunUID=dfd3d545-824c-4472-b0d5-06fb608d3da4"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-init,tekton.dev/taskRunUID=4dda03ee-be6a-4675-879e-d54fd9d006ca"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-image-index,tekton.dev/taskRunUID=7d4707f6-c349-435a-aef5-a10b7a4a341d"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clamav-scan,tekton.dev/taskRunUID=2c5c9eff-27f7-4972-b6bc-3d0f4b4900ad"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clone-repository,tekton.dev/taskRunUID=413fc191-21fd-4a6f-a249-c2e344159a26"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-shell-check,tekton.dev/taskRunUID=a3581de6-794f-449d-a1b4-d6fe1d7d1787"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-unicode-check,tekton.dev/taskRunUID=1b60ec43-1ba8-4aa4-8498-917240164308"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clair-scan,tekton.dev/taskRunUID=2d601b18-d22f-49c7-84ef-11dfc370f40e"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-prefetch-dependencies,tekton.dev/taskRunUID=995d0118-c642-42e0-a856-ee771cadfc5d"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-rpms-signature-scan,tekton.dev/taskRunUID=ec98b78d-fc9f-4710-a945-6a700fac9f9e"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:51:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:51:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:51:41.221461 1 request.go:752] "Waited before sending request" delay="1.993039744s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTU0MjUsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-04-24T19:51:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:51:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:51:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:51:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:51:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:51:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:51:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:51:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:51:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:51:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:51:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:51:51.222067 1 request.go:752] "Waited before sending request" delay="1.993047354s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTU1MjIsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:51:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:51:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:51:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:51:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:52:03.221082 1 request.go:752] "Waited before sending request" delay="1.994557447s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTU2MjIsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:52:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:52:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"info","ts":"2026-04-24T19:53:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,olm.permissions.hash=aJIunhXLmN0D2KdC3bWhzDEdqzDSk7vB0IXrMq,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=599686c89f"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=3XczF10crXosIDR6fuu6RBsxAR2AnVPd5PdJof,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.10,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-04-24T19:53:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=fd457fcd5"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OZHWmfbgMCalhBhO1duVexxUMmI4cNOSTkxv7,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-04-24T19:53:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:53:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:53:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-04-24T19:53:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clair-scan,tekton.dev/taskRunUID=c2e66714-b2e0-4ef2-b400-b3f57fc76f17"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-unicode-check,tekton.dev/taskRunUID=90c424c4-3339-41f1-8c37-17f30eb58ca0"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-tpa-scan,tekton.dev/taskRunUID=6ac2a36e-a3c3-4ced-a933-3116b7099156"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clone-repository,tekton.dev/taskRunUID=413fc191-21fd-4a6f-a249-c2e344159a26"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clamav-scan,tekton.dev/taskRunUID=0eb957d9-b3b5-4122-a614-6ef05def6243"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-init,tekton.dev/taskRunUID=a75640ed-74f7-4883-b2a5-6537657f5eaa"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-prefetch-dependencies,tekton.dev/taskRunUID=d888fb10-464b-4868-8457-c0dc2bac2d0f"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-image-index,tekton.dev/taskRunUID=40301060-71e4-48f3-9aa3-512edda530d0"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-tpa-scan,tekton.dev/taskRunUID=b762fc88-f9f9-49eb-9bb4-7ebe632dcc82"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-build-container,tekton.dev/taskRunUID=02a6db1e-4884-480c-af61-430aeab778ec"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-init,tekton.dev/taskRunUID=5fa55780-a839-4791-b06a-6daa06bdb1bb"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-prefetch-dependencies,tekton.dev/taskRunUID=995d0118-c642-42e0-a856-ee771cadfc5d"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-tpa-scan,tekton.dev/taskRunUID=4e502c85-4314-4df9-a9fe-4a882fe78415"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-container,tekton.dev/taskRunUID=60fe240c-9f5c-419e-80ea-04ca5df36eef"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-rpms-signature-scan,tekton.dev/taskRunUID=e37379d3-83aa-41c8-a73b-6a4bc05a0059"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-sast-shell-check,tekton.dev/taskRunUID=2b479a67-fa2a-41a3-822b-fca8be39e883"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-container,tekton.dev/taskRunUID=dfd3d545-824c-4472-b0d5-06fb608d3da4"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-deprecated-base-image-check,tekton.dev/taskRunUID=abc279a1-514c-48ea-a9f6-e513152919aa"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clone-repository,tekton.dev/taskRunUID=602e9ca3-7518-4d91-b59b-92266e1afe56"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-build-image-index,tekton.dev/taskRunUID=7d4707f6-c349-435a-aef5-a10b7a4a341d"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clair-scan,tekton.dev/taskRunUID=2d601b18-d22f-49c7-84ef-11dfc370f40e"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-deprecated-base-image-check,tekton.dev/taskRunUID=ea2dc494-7de4-4b3a-9abb-5a0f612ea4c1"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-shell-check,tekton.dev/taskRunUID=a3581de6-794f-449d-a1b4-d6fe1d7d1787"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-sast-unicode-check,tekton.dev/taskRunUID=1b60ec43-1ba8-4aa4-8498-917240164308"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-prefetch-dependencies,tekton.dev/taskRunUID=fb592b0b-356a-48b7-8d22-a603f57348c9"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-unicode-check,tekton.dev/taskRunUID=f6258a12-6ec1-4630-b6f9-0c3fc5c6997f"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=true,pipelinesascode.tekton.dev/check-run-id=72943396603,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-pull-request,pipelinesascode.tekton.dev/pull-request=228,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=a3e730b38c60afd2dec563b389aff5986b6aee88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRun=tsf-demo-comp-on-pull-request-lp5bj,tekton.dev/pipelineRunUID=9236d345-855c-4b50-bd4c-67fa2e0d15e6,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-pull-request-lp5bj-init,tekton.dev/taskRunUID=69b3dda4-b826-4aef-85b2-307bff01b0f5,test.appstudio.openshift.io/pr-group-sha=e5069fd5afbb0dd2d302e33fb7e375be47613ee02b0ea3b06542f7ea04bca2"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-init,tekton.dev/taskRunUID=4dda03ee-be6a-4675-879e-d54fd9d006ca"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-rpms-signature-scan,tekton.dev/taskRunUID=ec98b78d-fc9f-4710-a945-6a700fac9f9e"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clair-scan,tekton.dev/task=clair-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clair-scan,tekton.dev/taskRunUID=d77ecb04-fa25-4dd7-8e87-401f7158425d"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-rpms-signature-scan,tekton.dev/taskRunUID=913644ba-fda7-4373-a938-62c66d78561d"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-clone-repository,tekton.dev/taskRunUID=bc12503f-1283-4c93-8d5e-668d405f8878"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-clamav-scan,tekton.dev/taskRunUID=099e9394-5cd1-4510-be6e-ece7095f7136"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-deprecated-base-image-check,tekton.dev/taskRunUID=1856df84-9585-402e-8344-38e553ac24d1"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942493806,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=f74e3c4168c3a355cd8537f76f44a71124461a2a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRun=tsf-demo-comp-on-push-q64gp,tekton.dev/pipelineRunUID=bbf848ca-a857-4fd4-b303-ebd33e4e58fd,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-demo-comp-on-push-q64gp-sast-shell-check,tekton.dev/taskRunUID=1b1c1e08-6c8e-405e-86c1-db8f18e4d4a4"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72943430404,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=ed6c049d09964b71b59d5c8ec5365f6c0e325e88,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRun=tsf-demo-comp-on-push-4ffkq,tekton.dev/pipelineRunUID=1c83af10-6625-4f35-82fe-a1de6565a679,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-demo-comp-on-push-4ffkq-clamav-scan,tekton.dev/taskRunUID=2c5c9eff-27f7-4972-b6bc-3d0f4b4900ad"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-demo-app,appstudio.openshift.io/component=tsf-demo-comp,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=72942415317,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-demo-comp-on-push,pipelinesascode.tekton.dev/repository=tsf-demo-comp,pipelinesascode.tekton.dev/sha=4f62f534518b6fff8e5c62a33c20f300de013e40,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRun=tsf-demo-comp-on-push-jh77t,tekton.dev/pipelineRunUID=36ec5464-ad20-4f66-8430-52b773de9859,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-demo-comp-on-push-jh77t-build-image-index,tekton.dev/taskRunUID=c46e4e35-6526-4836-a62e-32eae75becd8"} {"level":"debug","ts":"2026-04-24T19:53:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-04-24T19:53:06Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:53:07.187596 1 request.go:752] "Waited before sending request" delay="1.082249082s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTYyMjIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:53:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-04-24T19:53:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-04-24T19:53:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=5f877569c5"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-04-24T19:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-04-24T19:53:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-04-24T19:53:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:53:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:53:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-04-24T19:53:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-04-24T19:53:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-04-24T19:53:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:53:19.188001 1 request.go:752] "Waited before sending request" delay="1.994005739s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTYzMDEsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=65548b4bb"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-04-24T19:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-04-24T19:53:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-04-24T19:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-04-24T19:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-04-24T19:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-04-24T19:53:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=747ff79cf6"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=b548bff66"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=6cd4c98449"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-04-24T19:53:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-04-24T19:53:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:53:29.188009 1 request.go:752] "Waited before sending request" delay="1.881934076s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTY0MTEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-04-24T19:53:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-04-24T19:53:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-04-24T19:53:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-04-24T19:53:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:53:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:53:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:53:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:53:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-04-24T19:53:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-04-24T19:53:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-04-24T19:53:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:53:39.188039 1 request.go:752] "Waited before sending request" delay="1.886304516s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTY1MDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:53:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-04-24T19:53:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-04-24T19:53:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-f685fd858,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,batch.kubernetes.io/job-name=tsf-iam,controller-uid=22551c9c-10d7-4312-83cc-ab11b22cdcd7,job-name=tsf-iam"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-04-24T19:53:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-04-24T19:53:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"debug","ts":"2026-04-24T19:53:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2psmoravj8tl8qs61likocpmrr2h1uu6"} {"level":"info","ts":"2026-04-24T19:53:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:53:51.188012 1 request.go:752] "Waited before sending request" delay="1.993832633s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTY1ODksInN0YXJ0IjoicmVrb3ItY3JlYXRldHJlZS1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69b5dfb4cb"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6fd9cc9587"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6f8645c66c"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,batch.kubernetes.io/job-name=tuf-repository-init-ft9rb,controller-uid=6449b7d8-0379-48ec-9e4e-1337b147063c,job-name=tuf-repository-init-ft9rb,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5dbbd767b5"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=748d44768b"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,batch.kubernetes.io/job-name=segment-backup-installation-72wmt,controller-uid=ae23a7b1-70aa-4353-8a57-68996898c13b,job-name=segment-backup-installation-72wmt"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cd9864c66"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8c67c946"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8597f896dd"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,batch.kubernetes.io/job-name=ctlog-createtree-job-znq6p,controller-uid=9099577f-4ff4-4f49-a7d5-dc3d0bd47787,job-name=ctlog-createtree-job-znq6p"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,batch.kubernetes.io/job-name=rekor-createtree-job-zgjfk,controller-uid=e83902ad-6757-4595-895a-728d8bcf7328,job-name=rekor-createtree-job-zgjfk"} {"level":"debug","ts":"2026-04-24T19:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-04-24T19:53:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-04-24T19:53:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-04-24T19:53:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:53:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-04-24T19:53:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-04-24T19:53:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-04-24T19:53:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0424 19:54:01.188346 1 request.go:752] "Waited before sending request" delay="1.99498434s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTY2NzYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-04-24T19:54:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-04-24T19:54:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:54:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:54:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:54:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:54:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-04-24T19:54:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-04-24T19:54:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-04-24T19:54:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-04-24T19:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-04-24T19:54:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-04-24T19:54:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=11b1b2e3-7276-4c48-b5df-029aa9c65849,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-04-24T19:54:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-04-24T19:54:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-04-24T19:54:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-04-24T19:54:05Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"}