{"level":"info","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Operator Version: 0.0.1"} {"level":"info","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Go Version: go1.25.8 (Red Hat 1.25.8-1.module+el8.10.0+24168+9fd3a552) X:strictfipsruntime"} {"level":"info","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Go OS/Arch: linux/amd64"} {"level":"info","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Setting Up Manager"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Load KubeConfig"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Initialize Manager"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Initialize Scheme"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Getting Manager Options"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Adding Healthz and Readyz checks"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Registering Components"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Initialize Prometheus Registry"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Initialize Prometheus metrics endpoint","endpoint":"http://0.0.0.0:8383/metrics"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Initialize ConfigMap watcher"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Initialize Validation Engine"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Initialize Reconciler"} {"level":"info","ts":"2026-05-14T08:48:49Z","logger":"DeploymentValidation","msg":"Starting Manager"} {"level":"info","ts":"2026-05-14T08:48:49Z","msg":"starting server","name":"health probe","addr":"[::]:8081"} {"level":"info","ts":"2026-05-14T08:48:49Z","logger":"ConfigMapWatcher","msg":"a ConfigMap has been created under watched namespace","name":"deployment-validation-operator-config","namespace":"openshift-deployment-validation-operator"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"Current set of enabled checks","checks":"dangling-horizontalpodautoscaler, dangling-ingress, dangling-networkpolicy, dangling-networkpolicypeer-podselector, dangling-service, dangling-servicemonitor, dnsconfig-options, duplicate-env-var, env-value-from, host-ipc, host-network, host-pid, hpa-minimum-three-replicas, invalid-target-ports, job-ttl-seconds-after-finished, liveness-port, minimum-three-replicas, no-anti-affinity, no-node-affinity, non-existent-service-account, non-isolated-pod, pdb-max-unavailable, pdb-min-available, pdb-unhealthy-pod-eviction-policy, priority-class-name, privilege-escalation-container, privileged-container, readiness-port, restart-policy, run-as-non-root, scc-deny-privileged-container, schema-validation, sorted-keys, startup-port, unsafe-sysctls, unset-cpu-requirements, unset-memory-requirements"} {"level":"info","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"The ConfigMap has been updated"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T08:48:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:48:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:48:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T08:50:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T08:50:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:50:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T08:52:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T08:52:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:52:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T08:54:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:54:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T08:54:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T08:56:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:56:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:56:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:56:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager-metrics-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app.kubernetes.io/name:konflux-operator control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager-metrics-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app.kubernetes.io/name:konflux-operator control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"info","ts":"2026-05-14T08:56:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T08:56:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T08:56:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhbk-operator\" not found"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":3,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"info","ts":"2026-05-14T08:56:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-subscriptions,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-subscriptions,helm.sh/chart=tsf-subscriptions-0.1.0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-subscriptions\" not found"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-subscriptions-crds\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-konflux-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-openshift-cert-manager-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhtas-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhtpa-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-subscriptions-crds\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-konflux-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-cert-manager-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhbk-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtas-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtpa-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-subscriptions-crds\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-konflux-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-cert-manager-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhbk-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtas-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtpa-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:56:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-14T08:56:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:56:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 08:56:51.429519 1 request.go:752] "Waited before sending request" delay="1.031933873s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MTkzMTMsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T08:56:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"info","ts":"2026-05-14T08:56:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:56:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:56:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T08:56:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"info","ts":"2026-05-14T08:56:55Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T08:58:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T08:58:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhbk-operator\" not found"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T08:58:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-iam,helm.sh/chart=tsf-iam-0.1.0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-iam\" not found"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak-keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"realm-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak-keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"realm-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak-keycloak\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"realm-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-14T08:58:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:58:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtpa-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-14T08:58:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-cainjector\" not found"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-webhook\" not found"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager\" not found"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"info","ts":"2026-05-14T08:58:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 08:58:51.297246 1 request.go:752] "Waited before sending request" delay="1.418734032s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjUxNDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-14T08:58:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:keycloak app.kubernetes.io/instance:keycloak app.kubernetes.io/managed-by:keycloak-operator])"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T08:58:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T08:58:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:58:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 08:59:03.297422 1 request.go:752] "Waited before sending request" delay="1.995340175s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjU0MDIsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager-metrics-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager-operator","object":"cert-manager-operator-controller-manager-metrics-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-14T08:59:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"info","ts":"2026-05-14T08:59:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T08:59:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"info","ts":"2026-05-14T08:59:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T08:59:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 08:59:13.298399 1 request.go:752] "Waited before sending request" delay="1.99663664s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjU2MDAsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T08:59:13Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:00:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:00:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:00:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:00:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:00:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:00:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:00:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:00:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:00:51.291890 1 request.go:752] "Waited before sending request" delay="1.466466065s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc5OTAsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMlx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:00:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:00:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-pipelines\" not found"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"tekton-chains-cosign\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tekton-chains-cosign\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"tsf-tekton-configuration","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tekton-chains-cosign\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:00:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:00:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:00:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,batch.kubernetes.io/job-name=create-importers,controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,job-name=create-importers"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,batch.kubernetes.io/job-name=migrate-db,controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,job-name=migrate-db"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=tsf-tpa,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-tpa,app.kubernetes.io/version=2.2.0,helm.sh/chart=tsf-tpa-0.1.0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-tpa\" not found"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"deployments-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"deployments-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"test-tsf-tpa","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"deployments-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,batch.kubernetes.io/job-name=create-db,controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,job-name=create-db"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:01:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:01:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:01:03.292411 1 request.go:752] "Waited before sending request" delay="1.882945561s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjgxNjAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:01:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:01:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-ui\" not found"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-search-ui\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-47fc4\""} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-47fc4\""} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-47fc4\""} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-47fc4\""} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-47fc4\""} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-db\" not found"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-fc9h6","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-fc9h6","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-fc9h6","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-fc9h6","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-fc9h6","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-fc9h6","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"segment-backup-installation\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-fc9h6","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-fc9h6","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"ctlog-createtree-job\" not found"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"ctlog\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"ctlog\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"ctlog\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-ui\" not found"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-search-ui\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-ui\" not found"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-search-ui\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-search-ui","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-search-ui\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"ctlog-createtree-job-pf8x6","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tuf-repository-init\" not found"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-75xw9","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-75xw9","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-75xw9","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-75xw9","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-75xw9","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-75xw9","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-createtree-job-75xw9","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"fulcio-server\" is referring to an unknown secret \"fulcio-cert-trusted-artifact-signercq5vw\""} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"fulcio\" not found"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"fulcio-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"fulcio-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"fulcio-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-server\" is referring to an unknown secret \"redis-password-trusted-artifact-signergpl8s\""} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-47fc4\""} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:01:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"info","ts":"2026-05-14T09:01:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:01:13.293343 1 request.go:752] "Waited before sending request" delay="1.99604433s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjgyOTYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:01:13Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:02:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-service-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"build-service","object":"build-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"info","ts":"2026-05-14T09:02:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"info","ts":"2026-05-14T09:02:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"dex\" not found"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:dex])"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"konflux-ui","kind":"Ingress","validation":"dangling-ingress","check_description":"Indicates when ingress do not have any associated services.","check_remediation":"Confirm that your ingress's backend correctly matches the name and port on one of your services.","check_failure_reason":"no service found matching ingress label (proxy), port web-tls"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":1,"labels":"app.kubernetes.io/instance=tsf-konflux,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-konflux,app.kubernetes.io/version=0.1,helm.sh/chart=tsf-konflux-0.1.0"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-konflux\" not found"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"konflux-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"konflux-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"konflux-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-14T09:02:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,batch.kubernetes.io/job-name=create-db,controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,job-name=create-db"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,batch.kubernetes.io/job-name=migrate-db,controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,job-name=migrate-db"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,batch.kubernetes.io/job-name=create-importers,controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,job-name=create-importers"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:02:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"namespace-lister\" not found"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[apps:namespace-lister])"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[apps:namespace-lister] []}) "} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-to-apiserver","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[apps:namespace-lister] []}) "} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:02:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:02:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:02:51.293403 1 request.go:752] "Waited before sending request" delay="1.457384984s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzEwODAsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:02:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:02:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tuf\" not found"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tuf-repository-init\" not found"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tuf-repository-init\" not found"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf-repository-init-2xx8b","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tuf-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:02:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:02:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:02:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:02:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:03:03.292774 1 request.go:752] "Waited before sending request" delay="1.994866299s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzEyMTAsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-webhook-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"integration-service-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:03:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:03:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"info","ts":"2026-05-14T09:03:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"info","ts":"2026-05-14T09:03:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:03:13.293688 1 request.go:752] "Waited before sending request" delay="1.909956889s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzEzNTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-14T09:03:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-service-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-webhook-service","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[control-plane:controller-manager])"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-service-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T09:03:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"release-service","object":"release-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-14T09:03:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:03:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:03:23.294626 1 request.go:752] "Waited before sending request" delay="1.913961379s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE1MzksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:03:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:03:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:03:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:03:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:03:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:03:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:03:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:03:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-14T09:03:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:03:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:03:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:03:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:03:35.293732 1 request.go:752] "Waited before sending request" delay="1.913963116s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE2ODksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:03:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:03:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:03:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:03:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:03:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"info","ts":"2026-05-14T09:03:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:03:47.293468 1 request.go:752] "Waited before sending request" delay="1.9953416s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE4MDQsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"image-controller-controller-manager\" not found"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"image-pruner\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"image-pruner\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"notification-resetter\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"notification-resetter\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:03:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-14T09:03:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:03:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:03:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:03:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:03:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:03:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:04:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:04:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:04:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:04:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:04:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:04:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:04:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:04:51.303232 1 request.go:752] "Waited before sending request" delay="1.240685971s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI1NzUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:04:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:04:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:04:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:04:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:04:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:04:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:04:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:05:03.303417 1 request.go:752] "Waited before sending request" delay="1.995576563s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI2ODcsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:05:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:05:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:05:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:05:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:05:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:05:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:05:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:05:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:05:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:05:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:05:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:05:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:05:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:05:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:05:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:05:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:05:13.303396 1 request.go:752] "Waited before sending request" delay="1.909591434s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI4MTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-14T09:05:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:05:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:05:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:05:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:05:25.303403 1 request.go:752] "Waited before sending request" delay="1.99471524s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI5MzMsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMlx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:05:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:05:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:05:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:05:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:05:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:05:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:05:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:05:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:05:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:05:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:05:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:05:35.303433 1 request.go:752] "Waited before sending request" delay="1.918649431s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMwNjgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:05:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:05:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:05:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:05:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:05:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:05:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:05:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:05:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:05:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:05:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:05:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:05:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:05:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:05:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:05:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:05:45.303966 1 request.go:752] "Waited before sending request" delay="1.899949067s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMxNzYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:05:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,batch.kubernetes.io/job-name=create-importers,controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,job-name=create-importers"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,batch.kubernetes.io/job-name=migrate-db,controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,job-name=migrate-db"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,batch.kubernetes.io/job-name=create-db,controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,job-name=create-db"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:05:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:05:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:05:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:05:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:05:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:05:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:05:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:05:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:06:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:06:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:06:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:06:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:06:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:06:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:06:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:06:51.367345 1 request.go:752] "Waited before sending request" delay="1.523062922s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM5NDMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:06:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:06:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:06:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:06:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:06:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:06:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:06:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:06:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:06:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:06:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:06:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:06:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:06:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:07:01.367464 1 request.go:752] "Waited before sending request" delay="1.909693266s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQwNTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:07:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:07:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:07:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:07:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:07:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:07:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:07:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:07:13.367624 1 request.go:752] "Waited before sending request" delay="1.911964211s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQxODAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:07:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:07:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:07:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:07:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:07:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:07:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:07:23.368028 1 request.go:752] "Waited before sending request" delay="1.912969019s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQyOTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:07:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:07:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:07:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:07:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:07:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:07:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:07:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:07:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:07:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:07:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:07:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:07:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:07:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:07:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:07:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:07:35.367685 1 request.go:752] "Waited before sending request" delay="1.996042396s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ0MTAsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:07:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:07:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:07:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:07:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:07:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:07:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:07:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:07:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:07:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:07:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:07:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:07:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:07:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:07:45.367955 1 request.go:752] "Waited before sending request" delay="1.891944003s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ1NDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,batch.kubernetes.io/job-name=create-db,controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,job-name=create-db"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,batch.kubernetes.io/job-name=create-importers,controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,job-name=create-importers"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,batch.kubernetes.io/job-name=migrate-db,controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,job-name=migrate-db"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:07:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:07:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:07:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:07:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:07:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:07:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:07:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:07:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:07:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:08:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:08:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:08:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:08:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:08:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:08:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:08:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:08:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:08:51.287847 1 request.go:752] "Waited before sending request" delay="1.253390595s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU2MTAsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:08:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:08:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:08:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:08:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:08:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:08:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:08:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:09:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:09:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:09:03.288442 1 request.go:752] "Waited before sending request" delay="1.910659461s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU3NDEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:09:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:09:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:09:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:09:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:09:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:09:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:09:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:09:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:09:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:09:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:09:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:09:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:09:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:09:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:09:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:09:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:09:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:09:15.288397 1 request.go:752] "Waited before sending request" delay="1.995643728s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU4NTksInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:09:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:09:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:09:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:09:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,batch.kubernetes.io/job-name=create-db,controller-uid=150b11ee-3515-4798-9a42-e5095217bab4,job-name=create-db"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,batch.kubernetes.io/job-name=create-importers,controller-uid=8976ac02-c6dc-435c-828d-18a6836fc45a,job-name=create-importers"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,batch.kubernetes.io/job-name=migrate-db,controller-uid=74635b21-f5f3-40dd-9daf-73c09461a5c3,job-name=migrate-db"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:09:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:09:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:09:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:09:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:09:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:09:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:09:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:09:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:09:27.287464 1 request.go:752] "Waited before sending request" delay="1.904034804s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYwNDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:09:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:09:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:09:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:09:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:09:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:09:39.288620 1 request.go:752] "Waited before sending request" delay="1.886941408s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/managed-tenant-qldvc/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYxOTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-14T09:09:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:09:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:09:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:09:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:09:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:09:51.287917 1 request.go:752] "Waited before sending request" delay="1.90996742s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYzMjgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:09:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:09:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:09:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:10:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:10:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:10:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:10:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:10:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:10:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:10:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:10:51.294007 1 request.go:752] "Waited before sending request" delay="1.493375148s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzcwNzcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-14T09:10:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:10:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:10:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:10:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:10:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:10:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:10:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:10:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:10:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:10:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:10:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:10:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:11:01.294475 1 request.go:752] "Waited before sending request" delay="1.90735943s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzcxNzcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:11:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:11:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:11:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:11:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:11:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:11:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:11:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:11:13.295598 1 request.go:752] "Waited before sending request" delay="1.906958327s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzczMjMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:11:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:11:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:11:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:11:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:11:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:11:25.295763 1 request.go:752] "Waited before sending request" delay="1.997045879s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc0MzEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:11:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:11:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:11:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:11:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:11:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:11:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:11:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:11:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:11:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:11:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:11:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:11:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:11:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:11:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:11:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:11:37.294465 1 request.go:752] "Waited before sending request" delay="1.891675578s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc2MDUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:11:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:11:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:11:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:11:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:11:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:11:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:11:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:11:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:11:49.293954 1 request.go:752] "Waited before sending request" delay="1.994617697s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc3MDksInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:11:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:11:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:11:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:12:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:12:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:12:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:12:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:12:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:12:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:12:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:12:51.294090 1 request.go:752] "Waited before sending request" delay="1.553935811s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg0NDQsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:12:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:12:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:12:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:12:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:12:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:12:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:12:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:13:01.294499 1 request.go:752] "Waited before sending request" delay="1.903308274s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/namespace-lister/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg1NDMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:13:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:13:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:13:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:13:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:13:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:13:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:13:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:13:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:13:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:13:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:13:13.295105 1 request.go:752] "Waited before sending request" delay="1.996050803s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg2NjgsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:13:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:13:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:13:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:13:25.294873 1 request.go:752] "Waited before sending request" delay="1.996046778s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg4MDQsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:13:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:13:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:13:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:13:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:13:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:13:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:13:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:13:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:13:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:13:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:13:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:13:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:13:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:13:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:13:37.294032 1 request.go:752] "Waited before sending request" delay="1.899813012s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg5NzYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:13:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:13:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:13:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:13:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:13:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:13:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:13:47.294388 1 request.go:752] "Waited before sending request" delay="1.995201715s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzkwNDgsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-05-14T09:13:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:13:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:13:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:13:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:14:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:14:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:14:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:14:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:14:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:14:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:14:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:14:51.316459 1 request.go:752] "Waited before sending request" delay="1.461128292s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk4MTYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:14:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:14:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:14:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:14:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:14:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:15:01.316465 1 request.go:752] "Waited before sending request" delay="1.910703371s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk5MTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:15:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:15:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:15:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:15:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:15:13.317402 1 request.go:752] "Waited before sending request" delay="1.996867547s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAwMzUsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:15:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:15:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:15:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:15:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:15:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:15:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:15:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:15:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:15:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:15:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:15:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:15:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:15:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:15:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:15:25.317217 1 request.go:752] "Waited before sending request" delay="1.996195701s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAxNzMsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-05-14T09:15:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:15:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:15:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:15:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:15:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:15:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:15:37.316171 1 request.go:752] "Waited before sending request" delay="1.916133952s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAzNDAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:15:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:15:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:15:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:15:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:15:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:15:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:15:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:15:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:15:47.316472 1 request.go:752] "Waited before sending request" delay="1.911363531s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDA0NTIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:15:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:15:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:15:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:15:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:15:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:15:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:15:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:15:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:15:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:15:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:15:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:15:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:16:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:16:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:16:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:16:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:16:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:16:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:16:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:16:51.314684 1 request.go:752] "Waited before sending request" delay="1.555484509s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDExNzQsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:16:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:16:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:16:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:16:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:16:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:16:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:16:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:16:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:16:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:16:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:16:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:17:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:17:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:17:03.314762 1 request.go:752] "Waited before sending request" delay="1.83888651s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDEzMDYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:17:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:17:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:17:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:17:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:17:15.315412 1 request.go:752] "Waited before sending request" delay="1.903971833s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE0NDMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:17:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:17:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:17:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:17:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:17:27.314465 1 request.go:752] "Waited before sending request" delay="1.917572849s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE1OTAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-14T09:17:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:17:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:17:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:17:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:17:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:17:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:17:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:17:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:17:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:17:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:17:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:17:39.315216 1 request.go:752] "Waited before sending request" delay="1.915966476s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE3MjIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:17:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:17:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:17:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:17:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:17:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:17:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:17:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:17:51.313661 1 request.go:752] "Waited before sending request" delay="1.899532562s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE4NTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:17:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:18:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:18:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:18:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:18:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:18:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:18:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:18:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:18:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:18:51.295055 1 request.go:752] "Waited before sending request" delay="1.474721036s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI1NDQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:18:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:18:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:18:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:18:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:18:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:18:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:18:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:18:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:19:03.295402 1 request.go:752] "Waited before sending request" delay="1.995784616s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI2NDksInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:19:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:19:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:19:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:19:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:19:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:19:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:19:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:19:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:19:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:19:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:19:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:19:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:19:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:19:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:19:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:19:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:19:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:19:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:19:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:19:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:19:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:19:13.295407 1 request.go:752] "Waited before sending request" delay="1.995823883s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI3NjQsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:19:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:19:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:19:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:19:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:19:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:19:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:19:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:19:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:19:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:19:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:19:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:19:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:19:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:19:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:19:25.295445 1 request.go:752] "Waited before sending request" delay="1.885898757s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI5MjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:19:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:19:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:19:35.295446 1 request.go:752] "Waited before sending request" delay="1.996023754s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDMwMTUsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:19:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:19:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:19:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:19:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:19:47.294587 1 request.go:752] "Waited before sending request" delay="1.99432818s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDMxNDcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:19:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:19:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:19:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:19:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:19:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:19:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:19:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:20:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:20:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:20:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:20:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:20:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:20:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:20:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:20:51.305116 1 request.go:752] "Waited before sending request" delay="1.430871156s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQwODMsInN0YXJ0IjoicmVrb3ItY3JlYXRldHJlZS1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:20:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:20:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:20:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:20:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:20:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:21:03.305466 1 request.go:752] "Waited before sending request" delay="1.995581848s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQxOTksInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:21:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:21:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:21:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:21:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:21:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:21:13.306246 1 request.go:752] "Waited before sending request" delay="1.897949553s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ1MDMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-14T09:21:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:21:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:21:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:21:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:21:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:21:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:21:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:21:25.305331 1 request.go:752] "Waited before sending request" delay="1.901564592s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ3MTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:21:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:21:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:21:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:21:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:21:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:21:35.306011 1 request.go:752] "Waited before sending request" delay="1.89695341s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ4ODksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:21:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:21:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:21:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:21:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:21:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:21:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"info","ts":"2026-05-14T09:21:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:21:47.305096 1 request.go:752] "Waited before sending request" delay="1.994764558s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDUwMTcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:21:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:21:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:21:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:21:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:21:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:21:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:21:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:21:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:21:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:21:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:21:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:21:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:21:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:21:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:22:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:22:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:22:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:22:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:22:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:22:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:22:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:22:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:22:51.297374 1 request.go:752] "Waited before sending request" delay="1.43484611s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU4NzIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:22:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:22:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:22:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:22:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:23:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:23:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:23:03.298431 1 request.go:752] "Waited before sending request" delay="1.901764584s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/managed-tenant-qldvc/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDYwMDcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-14T09:23:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:23:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:23:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:23:15.298593 1 request.go:752] "Waited before sending request" delay="1.899952452s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDYxNDEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:23:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:23:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:23:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:23:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:23:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:23:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:23:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:23:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:23:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:23:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:23:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:23:25.298807 1 request.go:752] "Waited before sending request" delay="1.897952663s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDYyNzIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:23:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:23:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:23:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:23:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:23:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:23:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:23:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:23:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:23:37.297496 1 request.go:752] "Waited before sending request" delay="1.89750252s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY0MjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:23:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:23:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:23:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:23:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:23:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:23:49.298036 1 request.go:752] "Waited before sending request" delay="1.996045709s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY1NDAsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:23:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:23:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:23:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:24:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:24:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:24:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:24:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:24:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:24:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:24:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:24:51.375186 1 request.go:752] "Waited before sending request" delay="1.542558959s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDcyODEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:24:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:24:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:24:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:24:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:24:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:24:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:24:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:24:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:24:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:24:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:24:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:24:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:24:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:25:03.375421 1 request.go:752] "Waited before sending request" delay="1.995173912s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDczODYsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:25:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:25:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:25:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:25:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:25:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:25:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:25:13.375986 1 request.go:752] "Waited before sending request" delay="1.90295692s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc1MjQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:25:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:25:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:25:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:25:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:25:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:25:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:25:23.376428 1 request.go:752] "Waited before sending request" delay="1.873903652s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc2OTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:25:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"info","ts":"2026-05-14T09:25:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:25:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:25:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:25:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:25:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:25:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:25:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:25:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:25:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:25:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:25:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:25:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:25:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:25:35.375990 1 request.go:752] "Waited before sending request" delay="1.995048484s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc4MTUsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:25:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:25:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:25:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:25:47.375474 1 request.go:752] "Waited before sending request" delay="1.994806392s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc5NDMsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:25:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:25:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:25:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:25:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:25:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:25:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:25:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:25:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:25:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:26:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:26:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:26:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:26:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:26:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:26:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:26:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:26:51.315407 1 request.go:752] "Waited before sending request" delay="1.43301326s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/managed-tenant-qldvc/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDg5ODUsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-14T09:26:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:26:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:26:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:26:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:26:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:26:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:27:01.316113 1 request.go:752] "Waited before sending request" delay="1.901745475s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDkwOTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:27:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:27:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:27:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:27:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:27:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:27:13.316418 1 request.go:752] "Waited before sending request" delay="1.996509144s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDkyNTgsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:27:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:27:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:27:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:27:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:27:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:27:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:27:23.317004 1 request.go:752] "Waited before sending request" delay="1.897948463s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk0NDUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:27:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:27:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:27:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:27:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:27:35.316535 1 request.go:752] "Waited before sending request" delay="1.996047741s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk2NTUsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan,tekton.dev/taskRunUID=f3d327e4-7b66-4d28-bac1-b62a405caf7c"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-tpa-scan,tekton.dev/taskRunUID=59687722-67fa-4153-ba67-a5bcf050a64c"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75961563823,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-aalq8-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-aalq8,pac.test.appstudio.openshift.io/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-ctxn-4j528,tekton.dev/pipelineRunUID=6925eae1-2bd7-492b-9915-5c036644202f,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-ctxn-4j528-collect-keyless-params,tekton.dev/taskRunUID=abe4ecb8-1539-4522-bec5-2c3e99f49b83,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778750845,test.appstudio.openshift.io/scenario=my-integration-test-ctxn,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clamav-scan,tekton.dev/taskRunUID=c82ce35d-c004-4a19-8077-62820144812c"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check,tekton.dev/taskRunUID=95468a49-9f4a-4c29-b943-2359c4b5beca"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-shell-check,tekton.dev/taskRunUID=a9d13d63-17ab-4628-8763-61b12504b7f5"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-shell-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-unicode-check,tekton.dev/taskRunUID=042d0cc6-0ef2-4a68-b379-f5ecd441e941"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-aalq8\" not found"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-aalq8-on-push-99kc7-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-unicode-check\" is not set to runAsNonRoot"} {"level":"info","ts":"2026-05-14T09:27:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:27:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:27:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:27:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:27:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:27:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:27:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:27:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:27:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:27:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:27:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:27:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:27:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:27:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:27:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:27:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:27:47.316161 1 request.go:752] "Waited before sending request" delay="1.90609173s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk4MTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:27:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:27:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:27:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:27:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:28:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:28:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:28:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-2fe6a9bcb1,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,controller-revision-hash=affinity-assistant-2fe6a9bcb1-7b57f767cf,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-2fe6a9bcb1-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"affinity-assistant-2fe6a9bcb1","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"affinity-assistant-2fe6a9bcb1","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"affinity-assistant-2fe6a9bcb1","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"affinity-assistant-2fe6a9bcb1","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"affinity-assistant-2fe6a9bcb1","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=collect-data,tekton.dev/task=collect-data,tekton.dev/taskRun=managed-zgdvc-collect-data,tekton.dev/taskRunUID=1aab0030-8a82-432b-8f48-4f30851db137"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-zgdvc-verify-access-to-resources,tekton.dev/taskRunUID=f315bb2b-26fb-4a08-b712-43636d88989f"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-2fe6a9bcb1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-qldvc"} {"level":"info","ts":"2026-05-14T09:28:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:28:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:28:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:28:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:28:51.366504 1 request.go:752] "Waited before sending request" delay="1.550159966s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTA4OTEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:28:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:28:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:28:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:28:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:28:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:28:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:28:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:28:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:28:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:28:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:28:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:28:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:28:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:29:03.367437 1 request.go:752] "Waited before sending request" delay="1.996652623s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTEwMDIsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:29:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:29:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:29:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:29:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:29:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:29:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:29:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:29:15.366502 1 request.go:752] "Waited before sending request" delay="1.995539766s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTExNjcsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:29:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:29:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:29:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:29:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:29:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75961563823,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-aalq8-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-aalq8,pac.test.appstudio.openshift.io/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-ctxn-4j528,tekton.dev/pipelineRunUID=6925eae1-2bd7-492b-9915-5c036644202f,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-ctxn-4j528-collect-keyless-params,tekton.dev/taskRunUID=abe4ecb8-1539-4522-bec5-2c3e99f49b83,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778750845,test.appstudio.openshift.io/scenario=my-integration-test-ctxn,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75961563823,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-aalq8-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-aalq8,pac.test.appstudio.openshift.io/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-ctxn-4j528,tekton.dev/pipelineRunUID=6925eae1-2bd7-492b-9915-5c036644202f,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-ctxn-4j528-verify,tekton.dev/taskRunUID=a75aae81-0b8a-410a-9cbd-0118e9af65f7,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778750845,test.appstudio.openshift.io/scenario=my-integration-test-ctxn,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-ctxn-4j528-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clamav-scan,tekton.dev/taskRunUID=c82ce35d-c004-4a19-8077-62820144812c"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check,tekton.dev/taskRunUID=95468a49-9f4a-4c29-b943-2359c4b5beca"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan,tekton.dev/taskRunUID=f3d327e4-7b66-4d28-bac1-b62a405caf7c"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-unicode-check,tekton.dev/taskRunUID=042d0cc6-0ef2-4a68-b379-f5ecd441e941"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-shell-check,tekton.dev/taskRunUID=a9d13d63-17ab-4628-8763-61b12504b7f5"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-tpa-scan,tekton.dev/taskRunUID=59687722-67fa-4153-ba67-a5bcf050a64c"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:29:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:29:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:29:27.366479 1 request.go:752] "Waited before sending request" delay="1.906299727s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE2NDAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:29:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:29:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:29:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:29:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:29:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:29:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:29:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:29:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:29:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:29:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:29:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:29:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:29:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:29:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:29:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:29:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:29:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:29:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:29:39.367805 1 request.go:752] "Waited before sending request" delay="1.997052051s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTE4MjUsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:29:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:29:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:29:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:29:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:29:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:29:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:29:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:29:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:29:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:29:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:29:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:29:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:29:51.366905 1 request.go:752] "Waited before sending request" delay="1.90163024s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTIxMTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:29:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:30:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:30:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:30:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-2fe6a9bcb1,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,controller-revision-hash=affinity-assistant-2fe6a9bcb1-7b57f767cf,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-2fe6a9bcb1-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-qldvc"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=collect-data,tekton.dev/task=collect-data,tekton.dev/taskRun=managed-zgdvc-collect-data,tekton.dev/taskRunUID=1aab0030-8a82-432b-8f48-4f30851db137"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=collect-tpa-params,tekton.dev/task=collect-tpa-params,tekton.dev/taskRun=managed-zgdvc-collect-tpa-params,tekton.dev/taskRunUID=e520c5a1-1859-4d3b-8d9d-590eb9400ead"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-tpa-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=filter-already-released-images,tekton.dev/task=filter-already-released-images,tekton.dev/taskRun=managed-zgdvc-filter-already-released-images,tekton.dev/taskRunUID=8ba1cc17-282d-4438-b541-265b65ef69af"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=push-snapshot,tekton.dev/task=push-snapshot,tekton.dev/taskRun=managed-zgdvc-push-snapshot,tekton.dev/taskRunUID=b4367a27-4713-4982-8a67-5a15fdad730f"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-push-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=verify-conforma,tekton.dev/task=verify-conforma-konflux-ta,tekton.dev/taskRun=managed-zgdvc-verify-conforma,tekton.dev/taskRunUID=d1db424c-cd21-4abf-91cb-6f2d0e147aa2"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-initialize-tuf\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-reduce\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-report-json\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-version\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-show-config\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-assert\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-initialize-tuf\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-reduce\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-report-json\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-version\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-show-config\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-assert\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=apply-mapping,tekton.dev/task=apply-mapping,tekton.dev/taskRun=managed-zgdvc-apply-mapping,tekton.dev/taskRunUID=1776ad28-d191-4184-943a-6759ab1b4443"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=check-data-keys,tekton.dev/task=check-data-keys,tekton.dev/taskRun=managed-zgdvc-check-data-keys,tekton.dev/taskRunUID=132f361d-1352-4bb1-8db4-781572ffbc88"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=collect-registry-token-secret,tekton.dev/task=collect-registry-token-secret,tekton.dev/taskRun=managed-zgdvc-collect-registry-token-secret,tekton.dev/taskRunUID=f2de8bc3-6091-4168-ba8c-dc41728c9d75"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=collect-signing-params,tekton.dev/task=collect-signing-params,tekton.dev/taskRun=managed-zgdvc-collect-signing-params,tekton.dev/taskRunUID=792cc098-bf0f-434a-bc5e-f6faaa289a1f"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-signing-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=collect-task-params,tekton.dev/task=collect-task-params,tekton.dev/taskRun=managed-zgdvc-collect-task-params,tekton.dev/taskRunUID=f81386d4-58d3-41b2-8c45-231a60e78c8e"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-qldvc","object":"managed-zgdvc-collect-task-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=reduce-snapshot,tekton.dev/taskRun=managed-zgdvc-reduce-snapshot,tekton.dev/taskRunUID=d06bfa55-3ede-4c9f-9bfe-5e95ebb756de"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc,tekton.dev/pipelineRunUID=e81fd0a7-a271-4f1b-83c1-a8a60df4ef32,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-zgdvc-verify-access-to-resources,tekton.dev/taskRunUID=f315bb2b-26fb-4a08-b712-43636d88989f"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-qldvc"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-qldvc","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-2fe6a9bcb1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260514-092106-000-f3ae1a4-z55lv,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-zgdvc"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-qldvc"} {"level":"info","ts":"2026-05-14T09:30:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:30:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:30:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:30:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:30:51.376473 1 request.go:752] "Waited before sending request" delay="1.451581744s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTMxMDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:30:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:30:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:30:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:30:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:30:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:30:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:30:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:30:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:30:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:30:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:30:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:30:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:30:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:31:01.376584 1 request.go:752] "Waited before sending request" delay="1.908302528s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTMyMjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:31:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:31:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:31:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:31:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:31:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:31:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:31:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:31:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:31:13.377470 1 request.go:752] "Waited before sending request" delay="1.837891738s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTM0MjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:31:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:31:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:31:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:31:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:31:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:31:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:31:25.377154 1 request.go:752] "Waited before sending request" delay="1.996049797s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTM1NjgsInN0YXJ0IjoicGlwZWxpbmVzLXNjYy1yb2xlYmluZGluZ1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan,tekton.dev/taskRunUID=f3d327e4-7b66-4d28-bac1-b62a405caf7c"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75961563823,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-aalq8-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-aalq8,pac.test.appstudio.openshift.io/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-ctxn-4j528,tekton.dev/pipelineRunUID=6925eae1-2bd7-492b-9915-5c036644202f,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-ctxn-4j528-collect-keyless-params,tekton.dev/taskRunUID=abe4ecb8-1539-4522-bec5-2c3e99f49b83,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778750845,test.appstudio.openshift.io/scenario=my-integration-test-ctxn,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clamav-scan,tekton.dev/taskRunUID=c82ce35d-c004-4a19-8077-62820144812c"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-shell-check,tekton.dev/taskRunUID=a9d13d63-17ab-4628-8763-61b12504b7f5"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-unicode-check,tekton.dev/taskRunUID=042d0cc6-0ef2-4a68-b379-f5ecd441e941"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-tpa-scan,tekton.dev/taskRunUID=59687722-67fa-4153-ba67-a5bcf050a64c"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,appstudio.openshift.io/snapshot=tsf-app-20260514-092106-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75961563823,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-aalq8-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-aalq8,pac.test.appstudio.openshift.io/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-ctxn-4j528,tekton.dev/pipelineRunUID=6925eae1-2bd7-492b-9915-5c036644202f,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-ctxn-4j528-verify,tekton.dev/taskRunUID=a75aae81-0b8a-410a-9cbd-0118e9af65f7,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778750845,test.appstudio.openshift.io/scenario=my-integration-test-ctxn,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check,tekton.dev/taskRunUID=95468a49-9f4a-4c29-b943-2359c4b5beca"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:31:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:31:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:31:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:31:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:31:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:31:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:31:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:31:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:31:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:31:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:31:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:31:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:31:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:31:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:31:35.377399 1 request.go:752] "Waited before sending request" delay="1.994637343s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTM2OTIsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:31:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:31:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:31:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:31:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:31:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:31:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:31:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:31:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:31:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:31:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:31:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:31:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:31:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:31:47.376511 1 request.go:752] "Waited before sending request" delay="1.995372259s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTM4MTQsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:31:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:31:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:31:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:31:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:31:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:31:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:31:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:31:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:31:53Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:32:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:32:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:32:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:32:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:32:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:32:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:32:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:32:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:32:51.331354 1 request.go:752] "Waited before sending request" delay="1.352436485s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTQ5MzMsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMlx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:32:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:32:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-tpa-scan,tekton.dev/taskRunUID=59687722-67fa-4153-ba67-a5bcf050a64c"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clamav-scan,tekton.dev/taskRunUID=c82ce35d-c004-4a19-8077-62820144812c"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check,tekton.dev/taskRunUID=95468a49-9f4a-4c29-b943-2359c4b5beca"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan,tekton.dev/taskRunUID=f3d327e4-7b66-4d28-bac1-b62a405caf7c"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-shell-check,tekton.dev/taskRunUID=a9d13d63-17ab-4628-8763-61b12504b7f5"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-unicode-check,tekton.dev/taskRunUID=042d0cc6-0ef2-4a68-b379-f5ecd441e941"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:32:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:32:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:32:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:32:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:32:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:32:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:32:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:32:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:32:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:32:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:32:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:33:01.331818 1 request.go:752] "Waited before sending request" delay="1.910045929s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTU1NzgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:33:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:33:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:33:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:33:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:33:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:33:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:33:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:33:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:33:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:33:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:33:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:33:13.332390 1 request.go:752] "Waited before sending request" delay="1.996506375s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTU3MDYsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:33:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:33:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:33:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:33:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:33:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:33:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:33:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:33:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:33:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:33:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:33:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:33:23.332669 1 request.go:752] "Waited before sending request" delay="1.99605168s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTU4NDAsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:33:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:33:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:33:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:33:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:33:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:33:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:33:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:33:35.332419 1 request.go:752] "Waited before sending request" delay="1.995639309s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTYwMDEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:33:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:33:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:33:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:33:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:33:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:33:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:33:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:33:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:33:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:33:47.331111 1 request.go:752] "Waited before sending request" delay="1.915764355s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTYxNDcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:33:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:34:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:34:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:34:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:34:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:34:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:34:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:34:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:34:51.290469 1 request.go:752] "Waited before sending request" delay="1.512059994s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTY5MDMsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:34:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:34:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:34:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:34:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:34:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:34:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:34:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:35:03.291396 1 request.go:752] "Waited before sending request" delay="1.996750842s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTcwMTAsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:35:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:35:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:35:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:35:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:35:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:35:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:35:13.291629 1 request.go:752] "Waited before sending request" delay="1.908967567s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTcxNjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-14T09:35:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:35:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:35:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:35:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:35:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:35:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:35:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:35:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:35:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:35:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:35:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:35:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:35:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:35:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:35:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:35:25.290122 1 request.go:752] "Waited before sending request" delay="1.909713752s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTczMDgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:35:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:35:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:35:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:35:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:35:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:35:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:35:35.290414 1 request.go:752] "Waited before sending request" delay="1.910331319s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTc0MjMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:35:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:35:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:35:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:35:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:35:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-unicode-check,tekton.dev/taskRunUID=042d0cc6-0ef2-4a68-b379-f5ecd441e941"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-tpa-scan,tekton.dev/taskRunUID=59687722-67fa-4153-ba67-a5bcf050a64c"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clamav-scan,tekton.dev/taskRunUID=c82ce35d-c004-4a19-8077-62820144812c"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check,tekton.dev/taskRunUID=95468a49-9f4a-4c29-b943-2359c4b5beca"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan,tekton.dev/taskRunUID=f3d327e4-7b66-4d28-bac1-b62a405caf7c"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-shell-check,tekton.dev/taskRunUID=a9d13d63-17ab-4628-8763-61b12504b7f5"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:35:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:35:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:35:47.290363 1 request.go:752] "Waited before sending request" delay="1.99555216s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTc1NDcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:35:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:35:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:35:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:35:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:35:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:35:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:35:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:35:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:35:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:35:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:35:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:35:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:35:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:35:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:36:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:36:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:36:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:36:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:36:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:36:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:36:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:36:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:36:51.308921 1 request.go:752] "Waited before sending request" delay="1.463748913s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTg3ODksInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMlx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:36:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:36:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-init,tekton.dev/taskRunUID=c99ff536-b165-40dc-97e4-aebc80b861da"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clamav-scan,tekton.dev/taskRunUID=c82ce35d-c004-4a19-8077-62820144812c"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-shell-check,tekton.dev/taskRunUID=a9d13d63-17ab-4628-8763-61b12504b7f5"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-clone-repository,tekton.dev/taskRunUID=4332eee2-831b-444b-a924-ecbff749de98"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-prefetch-dependencies,tekton.dev/taskRunUID=6f4cf6f1-6512-495f-a07a-a3c5cb930097"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check,tekton.dev/taskRunUID=95468a49-9f4a-4c29-b943-2359c4b5beca"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-tpa-scan,tekton.dev/taskRunUID=59687722-67fa-4153-ba67-a5bcf050a64c"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan,tekton.dev/taskRunUID=f3d327e4-7b66-4d28-bac1-b62a405caf7c"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-unicode-check,tekton.dev/taskRunUID=042d0cc6-0ef2-4a68-b379-f5ecd441e941"} {"level":"debug","ts":"2026-05-14T09:36:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:36:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:36:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:36:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:36:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:36:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:36:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:36:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:36:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:36:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:36:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:37:01.309299 1 request.go:752] "Waited before sending request" delay="1.912693684s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTg5MTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:37:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:37:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:37:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:37:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:37:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:37:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:37:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:37:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:37:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:37:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:37:11.309721 1 request.go:752] "Waited before sending request" delay="1.902968192s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTkwMzcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:37:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:37:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:37:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:37:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:37:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:37:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:37:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:37:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:37:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:37:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:37:23.309868 1 request.go:752] "Waited before sending request" delay="1.996043421s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTkxNDcsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:37:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:37:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:37:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:37:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:37:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:37:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:37:33.310463 1 request.go:752] "Waited before sending request" delay="1.903962169s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTkzNDksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:37:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:37:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:37:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:37:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:37:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:37:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:37:45.309460 1 request.go:752] "Waited before sending request" delay="1.897691602s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTk1NDEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-14T09:37:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:37:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:38:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:38:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:38:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:38:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:38:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:38:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:38:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:38:51.284190 1 request.go:752] "Waited before sending request" delay="1.493669364s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjAzMjIsInN0YXJ0IjoicmVrb3ItY3JlYXRldHJlZS1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:38:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:38:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:38:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:38:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:38:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:38:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:39:01.285118 1 request.go:752] "Waited before sending request" delay="1.91431351s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjA0MzYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:39:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:39:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:39:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:39:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:39:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:39:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:39:13.285451 1 request.go:752] "Waited before sending request" delay="1.99592841s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjA2MDYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:39:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:39:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:39:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:39:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:39:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:39:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:39:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:39:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:39:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=7846db775"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-14T09:39:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-14T09:39:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-14T09:39:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:39:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:39:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-14T09:39:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-14T09:39:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-14T09:39:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:39:25.285118 1 request.go:752] "Waited before sending request" delay="1.995056195s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjEwMDksInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-05-14T09:39:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:39:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:39:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:39:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:39:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:39:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:39:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:39:37.284442 1 request.go:752] "Waited before sending request" delay="1.793540979s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjEyMDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-build-container,tekton.dev/taskRunUID=19a1aa78-f016-4ee9-862f-c1dfc0d228c7"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-prefetch-dependencies,tekton.dev/taskRunUID=6f4cf6f1-6512-495f-a07a-a3c5cb930097"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-tpa-scan,tekton.dev/taskRunUID=03bde232-f5a2-4d79-82eb-09f1444dc1ed"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=javf2eb452dc6d59a4a74b4279f5fe6589b-deprecated-base-image-check,tekton.dev/taskRunUID=505ccdb4-a5fd-45dd-bf52-d1c3cf19c7c8"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clamav-scan,tekton.dev/taskRunUID=c82ce35d-c004-4a19-8077-62820144812c"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-clamav-scan,tekton.dev/taskRunUID=ba029695-097e-4789-b5c2-c6e048d1a794"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-rpms-signature-scan,tekton.dev/taskRunUID=7e3526bd-c8ff-4829-abc9-64eefe8150b1"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-sast-shell-check,tekton.dev/taskRunUID=220c44d4-54ba-423a-bcad-e0c2489b84ec"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-shell-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-sast-unicode-check,tekton.dev/taskRunUID=1e827ab8-0509-49b0-bda2-9418b08952e3"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan,tekton.dev/taskRunUID=f3d327e4-7b66-4d28-bac1-b62a405caf7c"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-shell-check,tekton.dev/taskRunUID=a9d13d63-17ab-4628-8763-61b12504b7f5"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-build-image-index,tekton.dev/taskRunUID=666f27ad-ba61-42d2-b8b4-bcfc7d4f197a"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-clone-repository,tekton.dev/taskRunUID=4332eee2-831b-444b-a924-ecbff749de98"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check,tekton.dev/taskRunUID=95468a49-9f4a-4c29-b943-2359c4b5beca"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-unicode-check,tekton.dev/taskRunUID=042d0cc6-0ef2-4a68-b379-f5ecd441e941"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-tpa-scan,tekton.dev/taskRunUID=59687722-67fa-4153-ba67-a5bcf050a64c"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-init,tekton.dev/taskRunUID=c99ff536-b165-40dc-97e4-aebc80b861da"} {"level":"debug","ts":"2026-05-14T09:39:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:39:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:39:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:39:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:39:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:39:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:39:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:39:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:39:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:39:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:39:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:39:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:39:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:39:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:39:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:39:49.285420 1 request.go:752] "Waited before sending request" delay="1.996505203s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjEzMTYsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:39:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"info","ts":"2026-05-14T09:40:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5fb678d5f4"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=a6IgdKnq2dyzWxzss4ouu5494lYw9l4nKHaLrO,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-14T09:40:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q9jgrb0075blghrf7vteh4c2bcrl0u2"} {"level":"info","ts":"2026-05-14T09:40:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=566fd969fb"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=OjaPuHGGxLFCnrJjtfw2cSJ0s4Yycb6L920Ue,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-14T09:40:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clone-repository,tekton.dev/taskRunUID=375f86f7-7d1c-4c87-b164-3cad07be1504"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-prefetch-dependencies,tekton.dev/taskRunUID=b2a96221-c3d8-4084-bf9f-498c0f6e3658"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-rpms-signature-scan,tekton.dev/taskRunUID=f3d327e4-7b66-4d28-bac1-b62a405caf7c"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-build-container,tekton.dev/taskRunUID=19a1aa78-f016-4ee9-862f-c1dfc0d228c7"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-rpms-signature-scan,tekton.dev/taskRunUID=7e3526bd-c8ff-4829-abc9-64eefe8150b1"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-container,tekton.dev/taskRunUID=b594733e-fee6-4f28-a894-daad4fcb43c3"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-unicode-check,tekton.dev/taskRunUID=042d0cc6-0ef2-4a68-b379-f5ecd441e941"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-tpa-scan,tekton.dev/taskRunUID=59687722-67fa-4153-ba67-a5bcf050a64c"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-prefetch-dependencies,tekton.dev/taskRunUID=6f4cf6f1-6512-495f-a07a-a3c5cb930097"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-clamav-scan,tekton.dev/taskRunUID=c82ce35d-c004-4a19-8077-62820144812c"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-init,tekton.dev/taskRunUID=d98cef57-f019-4954-aaa9-1e53c8b9980e"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-sast-shell-check,tekton.dev/taskRunUID=a9d13d63-17ab-4628-8763-61b12504b7f5"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-build-image-index,tekton.dev/taskRunUID=666f27ad-ba61-42d2-b8b4-bcfc7d4f197a"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-clone-repository,tekton.dev/taskRunUID=4332eee2-831b-444b-a924-ecbff749de98"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-init,tekton.dev/taskRunUID=c99ff536-b165-40dc-97e4-aebc80b861da"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-sast-shell-check,tekton.dev/taskRunUID=220c44d4-54ba-423a-bcad-e0c2489b84ec"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-sast-unicode-check,tekton.dev/taskRunUID=1e827ab8-0509-49b0-bda2-9418b08952e3"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-tpa-scan,tekton.dev/taskRunUID=03bde232-f5a2-4d79-82eb-09f1444dc1ed"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,appstudio.openshift.io/snapshot=test-app-177875135-20260514-093620-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75963683282,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=java-quarkus-177875135-on-push,pac.test.appstudio.openshift.io/repository=java-quarkus-177875135,pac.test.appstudio.openshift.io/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo-177875135,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=test-app-177875135-enterprise-contract-fgbmb,tekton.dev/pipelineRunUID=178e1cf4-01b5-462c-98d2-f5201fccb9cf,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=test-app-177875135-enterprise-contract-fgbmb-verify,tekton.dev/taskRunUID=09955d0a-8966-4b90-a99a-39a67d758873,test.appstudio.openshift.io/pipelinerunfinishtime=1778751609,test.appstudio.openshift.io/scenario=test-app-177875135-enterprise-contract,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app-177875135-enterprise-contract-fgbmb-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-deprecated-base-image-check,tekton.dev/taskRunUID=95468a49-9f4a-4c29-b943-2359c4b5beca"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=java-quarkus-177875135-on-push-rpckv-clamav-scan,tekton.dev/taskRunUID=ba029695-097e-4789-b5c2-c6e048d1a794"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"java-quarkus-177875135-on-push-rpckv-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75963683282,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=java-quarkus-177875135-on-push,pipelinesascode.tekton.dev/repository=java-quarkus-177875135,pipelinesascode.tekton.dev/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo-177875135,tekton.dev/memberOf=tasks,tekton.dev/pipeline=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRun=java-quarkus-177875135-on-push-rpckv,tekton.dev/pipelineRunUID=5c3dd412-26e0-4b0f-9676-19955bff81f1,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=javf2eb452dc6d59a4a74b4279f5fe6589b-deprecated-base-image-check,tekton.dev/taskRunUID=505ccdb4-a5fd-45dd-bf52-d1c3cf19c7c8"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-java-quarkus-177875135\" not found"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"javf2eb452dc6d59a4a74b4279f38754ba58db11a278371198d53ec970e-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=test-app-177875135,appstudio.openshift.io/component=java-quarkus-177875135,appstudio.openshift.io/snapshot=test-app-177875135-20260514-093620-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75963683282,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=java-quarkus-177875135-on-push,pac.test.appstudio.openshift.io/repository=java-quarkus-177875135,pac.test.appstudio.openshift.io/sha=2a421d6bf698bf33cb85e6fdd15f7fb1321d5274,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo-177875135,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=test-app-177875135-enterprise-contract-fgbmb,tekton.dev/pipelineRunUID=178e1cf4-01b5-462c-98d2-f5201fccb9cf,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=test-app6f90141fadf488af6b1106ae009b2a7c-collect-keyless-params,tekton.dev/taskRunUID=5d75e349-beda-4aeb-a188-2d228ea5e0d5,test.appstudio.openshift.io/pipelinerunfinishtime=1778751609,test.appstudio.openshift.io/scenario=test-app-177875135-enterprise-contract,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"test-app6f90141fadf488af6b14dbae94e8e715eefd34b02932dd9a62c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-aalq8,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75961563823,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-aalq8-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-aalq8,pipelinesascode.tekton.dev/sha=f3ae1a4e36d626964a71a9854541120389f7b108,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRun=tsf-comp-aalq8-on-push-99kc7,tekton.dev/pipelineRunUID=36df20a1-fa0c-4a8d-ad7c-f6696da59a77,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-aalq8-on-push-99kc7-build-image-index,tekton.dev/taskRunUID=8c40ea20-65d5-4e79-9498-e8ea606aafdc"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-14T09:40:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=84ff8464cd"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-14T09:40:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=870bc179-10be-4b7b-8fd2-3a9cc3042e0d,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-14T09:40:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-14T09:40:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:40:51.297379 1 request.go:752] "Waited before sending request" delay="1.269665436s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjIzMTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:40:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5bd6679b5d"} {"level":"debug","ts":"2026-05-14T09:40:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:40:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:40:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:40:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:40:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-14T09:40:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-14T09:40:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-14T09:40:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:40:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-14T09:40:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-14T09:40:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:41:01.297982 1 request.go:752] "Waited before sending request" delay="1.993124327s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjI0MDQsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=5b8b875fc4"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=64cf7b667b"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=764b7bb667"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-14T09:41:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-14T09:41:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7fb98566b7"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=5cf78568f8"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=8fucnhxszcx4HqECFIyBsVK4GAHrIAx4puAdjk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:41:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-14T09:41:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:41:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=64f6bbdbd7"} {"level":"debug","ts":"2026-05-14T09:41:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:41:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:41:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-14T09:41:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-14T09:41:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-14T09:41:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=79c8d999ff"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=68b757865b"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=587ccfb98"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-14T09:41:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-14T09:41:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:41:13.297410 1 request.go:752] "Waited before sending request" delay="1.759508252s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjI1NjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=66c557c777"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6dbd66b85c"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,batch.kubernetes.io/job-name=segment-backup-installation-fc9h6,controller-uid=66b23444-890b-4876-8f0b-a5e368c307f4,job-name=segment-backup-installation-fc9h6"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=68dfdc5574"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7447468989"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,batch.kubernetes.io/job-name=ctlog-createtree-job-pf8x6,controller-uid=1bc11095-731b-4d50-ab8d-90c558117f16,job-name=ctlog-createtree-job-pf8x6"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7654db4cf9"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,batch.kubernetes.io/job-name=rekor-createtree-job-75xw9,controller-uid=497563ed-7d84-4b20-ba94-9341c8c4b161,job-name=rekor-createtree-job-75xw9"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,batch.kubernetes.io/job-name=tuf-repository-init-2xx8b,controller-uid=5b456f57-e84c-4439-95a3-f1af90b0b674,job-name=tuf-repository-init-2xx8b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=8d6554d94"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668cb87bc7"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cc5c56f4d"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-14T09:41:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-14T09:41:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,batch.kubernetes.io/job-name=tsf-iam,controller-uid=8996d092-54ec-45c8-ac15-cde642be994a,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-78c87d8b48,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-14T09:41:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-14T09:41:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:41:23.298688 1 request.go:752] "Waited before sending request" delay="1.992044952s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjI2NTMsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=867646c8cc"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=bf499964b"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-14T09:41:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-14T09:41:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:41:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-14T09:41:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-14T09:41:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-14T09:41:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-14T09:41:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-14T09:41:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-14T09:41:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0514 09:41:35.298502 1 request.go:752] "Waited before sending request" delay="1.903952376s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NjI4MDUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-14T09:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=544796b49f"} {"level":"debug","ts":"2026-05-14T09:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-14T09:41:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-14T09:41:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-14T09:41:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"}