{"level":"info","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Operator Version: 0.0.1"} {"level":"info","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Go Version: go1.25.8 (Red Hat 1.25.8-1.module+el8.10.0+24168+9fd3a552) X:strictfipsruntime"} {"level":"info","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Go OS/Arch: linux/amd64"} {"level":"info","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Setting Up Manager"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Load KubeConfig"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Initialize Manager"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Initialize Scheme"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Getting Manager Options"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Adding Healthz and Readyz checks"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Registering Components"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Initialize Prometheus Registry"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Initialize Prometheus metrics endpoint","endpoint":"http://0.0.0.0:8383/metrics"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Initialize ConfigMap watcher"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Initialize Validation Engine"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Initialize Reconciler"} {"level":"info","ts":"2026-05-12T11:41:07Z","logger":"DeploymentValidation","msg":"Starting Manager"} {"level":"info","ts":"2026-05-12T11:41:07Z","msg":"starting server","name":"health probe","addr":"[::]:8081"} {"level":"info","ts":"2026-05-12T11:41:07Z","logger":"ConfigMapWatcher","msg":"a ConfigMap has been created under watched namespace","name":"deployment-validation-operator-config","namespace":"openshift-deployment-validation-operator"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"Current set of enabled checks","checks":"dangling-horizontalpodautoscaler, dangling-ingress, dangling-networkpolicy, dangling-networkpolicypeer-podselector, dangling-service, dangling-servicemonitor, dnsconfig-options, duplicate-env-var, env-value-from, host-ipc, host-network, host-pid, hpa-minimum-three-replicas, invalid-target-ports, job-ttl-seconds-after-finished, liveness-port, minimum-three-replicas, no-anti-affinity, no-node-affinity, non-existent-service-account, non-isolated-pod, pdb-max-unavailable, pdb-min-available, pdb-unhealthy-pod-eviction-policy, priority-class-name, privilege-escalation-container, privileged-container, readiness-port, restart-policy, run-as-non-root, scc-deny-privileged-container, schema-validation, sorted-keys, startup-port, unsafe-sysctls, unset-cpu-requirements, unset-memory-requirements"} {"level":"info","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"The ConfigMap has been updated"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:41:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:41:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:41:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:41:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-subscriptions,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-subscriptions,helm.sh/chart=tsf-subscriptions-0.1.0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-subscriptions\" not found"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-subscriptions-crds\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-konflux-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-openshift-cert-manager-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhtas-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhtpa-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-subscriptions-crds\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-konflux-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-cert-manager-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhbk-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtas-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtpa-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-subscriptions-crds\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-konflux-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-cert-manager-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhbk-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtas-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtpa-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:41:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-12T11:41:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:41:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:41:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:41:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:41:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:41:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:41:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:41:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:43:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:43:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"info","ts":"2026-05-12T11:43:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:43:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager\" not found"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-cainjector\" not found"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"cert-manager-webhook\" not found"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-controller\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-cainjector","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-cainjector\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"cert-manager","object":"cert-manager-webhook","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cert-manager-webhook\" has memory limit 0"} {"level":"info","ts":"2026-05-12T11:43:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:keycloak app.kubernetes.io/instance:keycloak app.kubernetes.io/managed-by:keycloak-operator])"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"info","ts":"2026-05-12T11:43:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:43:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"info","ts":"2026-05-12T11:43:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:43:09.261312 1 request.go:752] "Waited before sending request" delay="1.233638462s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjE2NzMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-operator","object":"konflux-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:43:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:43:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtpa-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:43:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"info","ts":"2026-05-12T11:43:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:43:19.261339 1 request.go:752] "Waited before sending request" delay="1.994684787s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjE4MjcsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T11:43:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:43:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhbk-operator\" not found"} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:43:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"info","ts":"2026-05-12T11:43:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-iam,helm.sh/chart=tsf-iam-0.1.0"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-iam\" not found"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak-keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"realm-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak-keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"realm-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak-keycloak\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf","object":"test-tsf-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"realm-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:43:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-12T11:43:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:43:31.261164 1 request.go:752] "Waited before sending request" delay="1.996355766s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjIwNDksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T11:43:31Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:45:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=tsf-tpa,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-tpa,app.kubernetes.io/version=2.2.0,helm.sh/chart=tsf-tpa-0.1.0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-url\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-url\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"pre-install-tsf-tpa","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-url\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T11:45:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-server\" is referring to an unknown secret \"redis-password-trusted-artifact-signermptxn\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor\" not found"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-server\" is referring to an unknown secret \"redis-password-trusted-artifact-signermptxn\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor\" not found"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-redis\" is referring to an unknown secret \"redis-password-trusted-artifact-signermptxn\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-redis\" not found"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"enable-tls\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-redis\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-qvwjx","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-qvwjx","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-qvwjx","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-qvwjx","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-qvwjx","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-qvwjx","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"segment-backup-installation\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-qvwjx","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"segment-backup-installation-qvwjx","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-mqjmh\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-db\" not found"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-redis\" is referring to an unknown secret \"redis-password-trusted-artifact-signermptxn\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"enable-tls\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-redis\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"rekor-redis\" is referring to an unknown secret \"redis-password-trusted-artifact-signermptxn\""} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"enable-tls\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rekor-redis\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"enable-tls\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"rekor-redis","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rekor-redis\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"fulcio-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T11:45:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:45:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T11:45:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T11:45:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T11:45:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:45:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:45:09.269177 1 request.go:752] "Waited before sending request" delay="1.211291365s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjQzNjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:45:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:45:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:45:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:45:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:45:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:45:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T11:45:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:45:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:45:19.269447 1 request.go:752] "Waited before sending request" delay="1.994975882s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjQ0ODMsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T11:45:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T11:45:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:45:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-keycloak","object":"tsf-iam","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"info","ts":"2026-05-12T11:45:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:45:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T11:45:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:45:31.270719 1 request.go:752] "Waited before sending request" delay="1.997049788s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjQ4MjYsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:45:31Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:47:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=5a6f3b04-a137-4e4d-954e-0297522f89e1,batch.kubernetes.io/job-name=create-importers,controller-uid=5a6f3b04-a137-4e4d-954e-0297522f89e1,job-name=create-importers"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-importers","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=6b36e499-023d-42c1-b935-ca2ee1281e24,batch.kubernetes.io/job-name=migrate-db,controller-uid=6b36e499-023d-42c1-b935-ca2ee1281e24,job-name=migrate-db"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"migrate-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=708bf0f1-92ee-4869-b7a5-ba5981db02ca,batch.kubernetes.io/job-name=create-db,controller-uid=708bf0f1-92ee-4869-b7a5-ba5981db02ca,job-name=create-db"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T11:47:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"info","ts":"2026-05-12T11:47:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tas","object":"tuf","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T11:47:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:47:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:47:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"info","ts":"2026-05-12T11:47:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:47:09.279955 1 request.go:752] "Waited before sending request" delay="1.316609683s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc1MTQsInN0YXJ0IjoiL3JoYmstb3BlcmF0b3IudjI2LjQuMTEtb3ByLjJcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:47:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T11:47:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"info","ts":"2026-05-12T11:47:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T11:47:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-12T11:47:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:47:19.280312 1 request.go:752] "Waited before sending request" delay="1.993203138s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc1NjEsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:47:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"info","ts":"2026-05-12T11:47:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T11:47:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T11:47:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T11:47:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T11:47:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-12T11:47:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"dex\" not found"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":1,"labels":"app.kubernetes.io/instance=tsf-konflux,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-konflux,app.kubernetes.io/version=0.1,helm.sh/chart=tsf-konflux-0.1.0"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tsf-konflux\" not found"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"konflux-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"konflux-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"test-tsf-konflux","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"konflux-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"dex-client\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"dex\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"dex","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:dex])"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"konflux-ui","kind":"Ingress","validation":"dangling-ingress","check_description":"Indicates when ingress do not have any associated services.","check_remediation":"Confirm that your ingress's backend correctly matches the name and port on one of your services.","check_failure_reason":"no service found matching ingress label (proxy), port web-tls"} {"level":"debug","ts":"2026-05-12T11:47:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-12T11:47:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:47:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:47:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:47:31.280216 1 request.go:752] "Waited before sending request" delay="1.8544651s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc3MTIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:47:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:47:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:47:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T11:47:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"image-controller-controller-manager\" not found"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"image-pruner\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"image-pruner\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-image-pruner-cronjob","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"notification-resetter\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"notification-resetter\" is referring to an unknown secret \"quaytoken\""} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:47:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"image-controller","object":"image-controller-notification-resetter-cronjob","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-12T11:47:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"info","ts":"2026-05-12T11:47:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:47:41.281539 1 request.go:752] "Waited before sending request" delay="1.851902003s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc4MzUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T11:47:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T11:47:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T11:47:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:47:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T11:47:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:47:53.281333 1 request.go:752] "Waited before sending request" delay="1.842890467s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc5NDcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:47:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T11:47:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:47:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"info","ts":"2026-05-12T11:47:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"integration-service-controller-manager\" not found"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T11:48:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"info","ts":"2026-05-12T11:48:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:48:05.279903 1 request.go:752] "Waited before sending request" delay="1.846094294s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjgwNDAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:48:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:48:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"namespace-lister\" not found"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[apps:namespace-lister])"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[apps:namespace-lister] []}) "} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-from-konfluxui","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app=proxy)"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"namespace-lister","object":"namespace-lister-allow-to-apiserver","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[apps:namespace-lister] []}) "} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:48:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T11:48:09Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:49:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T11:49:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=5a6f3b04-a137-4e4d-954e-0297522f89e1,batch.kubernetes.io/job-name=create-importers,controller-uid=5a6f3b04-a137-4e4d-954e-0297522f89e1,job-name=create-importers"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=708bf0f1-92ee-4869-b7a5-ba5981db02ca,batch.kubernetes.io/job-name=create-db,controller-uid=708bf0f1-92ee-4869-b7a5-ba5981db02ca,job-name=create-db"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=6b36e499-023d-42c1-b935-ca2ee1281e24,batch.kubernetes.io/job-name=migrate-db,controller-uid=6b36e499-023d-42c1-b935-ca2ee1281e24,job-name=migrate-db"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T11:49:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:49:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T11:49:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:49:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T11:49:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T11:49:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:49:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:49:11.304207 1 request.go:752] "Waited before sending request" delay="1.996727839s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg3MTgsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:49:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T11:49:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:49:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:49:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:49:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:49:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:49:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:49:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T11:49:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:49:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T11:49:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T11:49:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T11:49:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T11:49:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T11:49:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:49:23.303942 1 request.go:752] "Waited before sending request" delay="1.842894919s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg4MjgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:49:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T11:49:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T11:49:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T11:49:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T11:49:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T11:49:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T11:49:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-client-secret\""} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"oauth2-proxy\" is referring to an unknown secret \"oauth2-proxy-cookie-secret\""} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"proxy\" not found"} {"level":"debug","ts":"2026-05-12T11:49:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"konflux-ui","object":"proxy","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-12T11:49:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:49:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:49:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:49:35.302388 1 request.go:752] "Waited before sending request" delay="1.851556801s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg5MzQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:49:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:49:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:49:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T11:49:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:49:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:49:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:49:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:49:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T11:49:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:49:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:49:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T11:49:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T11:49:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T11:49:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:49:45.302492 1 request.go:752] "Waited before sending request" delay="1.851733291s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkwMjIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T11:49:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T11:49:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T11:49:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:49:55.303373 1 request.go:752] "Waited before sending request" delay="1.995361853s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkxMDUsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:49:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T11:49:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:49:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T11:49:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:50:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T11:50:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T11:50:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:50:07.302784 1 request.go:752] "Waited before sending request" delay="1.994781641s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkyMjAsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T11:50:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T11:50:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:50:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:51:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T11:51:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T11:51:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T11:51:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T11:51:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T11:51:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T11:51:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:51:09.305900 1 request.go:752] "Waited before sending request" delay="1.206864195s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjk4NTEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:51:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:51:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:51:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T11:51:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T11:51:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=708bf0f1-92ee-4869-b7a5-ba5981db02ca,batch.kubernetes.io/job-name=create-db,controller-uid=708bf0f1-92ee-4869-b7a5-ba5981db02ca,job-name=create-db"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=6b36e499-023d-42c1-b935-ca2ee1281e24,batch.kubernetes.io/job-name=migrate-db,controller-uid=6b36e499-023d-42c1-b935-ca2ee1281e24,job-name=migrate-db"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=5a6f3b04-a137-4e4d-954e-0297522f89e1,batch.kubernetes.io/job-name=create-importers,controller-uid=5a6f3b04-a137-4e4d-954e-0297522f89e1,job-name=create-importers"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:51:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T11:51:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:51:21.306437 1 request.go:752] "Waited before sending request" delay="1.996053634s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjk5MjQsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T11:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:51:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:51:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T11:51:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:51:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T11:51:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:51:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:51:33.306020 1 request.go:752] "Waited before sending request" delay="1.851116372s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/build-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAwNTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:51:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T11:51:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:51:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:51:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:51:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:51:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:51:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:51:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T11:51:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:51:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T11:51:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T11:51:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T11:51:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:51:45.305977 1 request.go:752] "Waited before sending request" delay="1.853904305s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/segment-bridge/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAxNTgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:51:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T11:51:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T11:51:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T11:51:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T11:51:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T11:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T11:51:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T11:51:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T11:51:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:51:55.306009 1 request.go:752] "Waited before sending request" delay="1.994393289s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAyMzcsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T11:51:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T11:51:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:51:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:51:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:51:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:51:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:51:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T11:51:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:52:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T11:52:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T11:52:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:52:05.306050 1 request.go:752] "Waited before sending request" delay="1.852950228s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAzMzgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:52:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T11:52:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T11:52:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:52:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:53:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T11:53:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:53:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T11:53:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=5a6f3b04-a137-4e4d-954e-0297522f89e1,batch.kubernetes.io/job-name=create-importers,controller-uid=5a6f3b04-a137-4e4d-954e-0297522f89e1,job-name=create-importers"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=708bf0f1-92ee-4869-b7a5-ba5981db02ca,batch.kubernetes.io/job-name=create-db,controller-uid=708bf0f1-92ee-4869-b7a5-ba5981db02ca,job-name=create-db"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=6b36e499-023d-42c1-b935-ca2ee1281e24,batch.kubernetes.io/job-name=migrate-db,controller-uid=6b36e499-023d-42c1-b935-ca2ee1281e24,job-name=migrate-db"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T11:53:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:53:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T11:53:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:53:09.301352 1 request.go:752] "Waited before sending request" delay="1.207409292s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/managed-tenant-6103z/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA5MTksInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-12T11:53:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T11:53:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T11:53:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:53:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T11:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:53:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:53:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T11:53:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:53:21.301422 1 request.go:752] "Waited before sending request" delay="1.862912816s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzEwMTgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:53:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T11:53:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T11:53:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T11:53:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T11:53:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T11:53:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:53:33.301885 1 request.go:752] "Waited before sending request" delay="1.99504304s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzExMDMsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:53:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T11:53:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T11:53:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T11:53:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T11:53:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T11:53:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T11:53:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:53:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T11:53:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:53:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:53:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:53:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:53:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T11:53:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:53:45.300697 1 request.go:752] "Waited before sending request" delay="1.856806175s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzEyMjIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:53:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T11:53:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:53:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:53:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:53:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:53:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:53:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:53:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T11:53:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:53:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T11:53:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T11:53:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:53:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:53:57.301295 1 request.go:752] "Waited before sending request" delay="1.849671241s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzEzMzMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T11:53:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T11:53:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:54:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T11:54:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:54:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T11:54:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:54:09.301356 1 request.go:752] "Waited before sending request" delay="1.866608535s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE0NDMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:54:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T11:54:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T11:54:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:55:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T11:55:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T11:55:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T11:55:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T11:55:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T11:55:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T11:55:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T11:55:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:55:09.281887 1 request.go:752] "Waited before sending request" delay="1.154750579s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE5OTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T11:55:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T11:55:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:55:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:55:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:55:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:55:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:55:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T11:55:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:55:19.282409 1 request.go:752] "Waited before sending request" delay="1.992617481s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIwNDcsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:55:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T11:55:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:55:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:55:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:55:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:55:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:55:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:55:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T11:55:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T11:55:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T11:55:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:55:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:55:31.283731 1 request.go:752] "Waited before sending request" delay="1.996046414s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIxNjMsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T11:55:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T11:55:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T11:55:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T11:55:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:55:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T11:55:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:55:43.283510 1 request.go:752] "Waited before sending request" delay="1.996054677s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIyODksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:55:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T11:55:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T11:55:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T11:55:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T11:55:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:55:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:55:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:55:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:55:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:55:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T11:55:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:55:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:55:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T11:55:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:55:55.281993 1 request.go:752] "Waited before sending request" delay="1.845577532s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzIzOTgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:55:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T11:55:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:56:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T11:56:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:56:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:56:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:56:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:56:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:56:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:56:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T11:56:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:56:05.282341 1 request.go:752] "Waited before sending request" delay="1.993572437s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/managed-tenant-6103z/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI0ODYsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-12T11:56:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:56:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T11:56:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:56:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:57:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T11:57:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T11:57:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T11:57:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T11:57:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T11:57:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T11:57:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T11:57:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T11:57:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:57:09.282329 1 request.go:752] "Waited before sending request" delay="1.117484757s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMwNzMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:57:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:57:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:57:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:57:12Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:57:12Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T11:57:12Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T11:57:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:57:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:57:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:57:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:57:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:57:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:57:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T11:57:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T11:57:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T11:57:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:57:21.283353 1 request.go:752] "Waited before sending request" delay="1.863914952s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMxODMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T11:57:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T11:57:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T11:57:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:57:31.283910 1 request.go:752] "Waited before sending request" delay="1.993041681s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMyMzksInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T11:57:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T11:57:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:57:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T11:57:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T11:57:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T11:57:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:57:43.283748 1 request.go:752] "Waited before sending request" delay="1.993043394s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzMzNjUsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T11:57:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T11:57:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:57:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:57:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T11:57:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:57:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:57:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:57:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:57:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T11:57:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:57:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T11:57:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:57:55.283253 1 request.go:752] "Waited before sending request" delay="1.860800005s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM0NzUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:57:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T11:57:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:57:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:57:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:57:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:57:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:57:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:57:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T11:57:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:58:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:58:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T11:58:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:58:07.283169 1 request.go:752] "Waited before sending request" delay="1.852134609s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM1NzIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-12T11:58:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T11:58:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T11:59:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T11:59:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T11:59:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T11:59:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T11:59:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T11:59:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T11:59:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:59:09.287038 1 request.go:752] "Waited before sending request" delay="1.20829429s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQxNDUsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T11:59:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T11:59:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T11:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T11:59:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T11:59:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T11:59:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:59:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:59:19.287358 1 request.go:752] "Waited before sending request" delay="1.775943859s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQyMTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T11:59:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T11:59:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T11:59:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:59:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:59:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T11:59:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:59:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:59:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T11:59:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T11:59:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T11:59:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:59:31.288307 1 request.go:752] "Waited before sending request" delay="1.994067542s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQzMDcsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMlx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T11:59:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T11:59:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T11:59:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T11:59:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T11:59:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T11:59:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T11:59:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T11:59:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:59:43.288138 1 request.go:752] "Waited before sending request" delay="1.861916335s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ0NDksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T11:59:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T11:59:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T11:59:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T11:59:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T11:59:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T11:59:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T11:59:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T11:59:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T11:59:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T11:59:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T11:59:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T11:59:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 11:59:55.287355 1 request.go:752] "Waited before sending request" delay="1.992627545s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ1MzcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-12T11:59:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T11:59:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:59:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:59:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:59:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:59:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T11:59:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T11:59:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T11:59:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T11:59:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T11:59:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T11:59:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:00:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:00:07.287123 1 request.go:752] "Waited before sending request" delay="1.9923012s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ2OTAsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:00:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:00:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:00:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:01:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:01:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:01:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:01:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:01:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"integration-service","object":"integration-service-snapshot-garbage-collector","kind":"CronJob","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:01:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:01:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:01:09.295388 1 request.go:752] "Waited before sending request" delay="1.263337317s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzUzMjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:01:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:01:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:01:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:01:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:01:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:01:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T12:01:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:01:21.295288 1 request.go:752] "Waited before sending request" delay="1.994516214s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU1MDYsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:01:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:01:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:01:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:01:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:01:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:01:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:01:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T12:01:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T12:01:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:01:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T12:01:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:01:31.296291 1 request.go:752] "Waited before sending request" delay="1.8629278s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU2NTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-12T12:01:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:01:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:01:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:01:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:01:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:01:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:01:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T12:01:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T12:01:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T12:01:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T12:01:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:01:41.296298 1 request.go:752] "Waited before sending request" delay="1.858884304s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU4NzEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-init,tekton.dev/taskRunUID=e20310b1-0465-471a-ab2f-3206e31f092f"} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:01:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"info","ts":"2026-05-12T12:01:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,batch.kubernetes.io/job-name=segment-bridge-29643120,controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,job-name=segment-bridge-29643120"} {"level":"debug","ts":"2026-05-12T12:01:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T12:01:45Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:01:45Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:01:45Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"segment-bridge","object":"segment-bridge","kind":"CronJob","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-12T12:01:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T12:01:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T12:01:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:01:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:01:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:01:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:01:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:01:53.295996 1 request.go:752] "Waited before sending request" delay="1.843902618s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYwOTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:01:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:01:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:01:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:01:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:01:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:01:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:01:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:01:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:02:03.296259 1 request.go:752] "Waited before sending request" delay="1.995053155s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYyMjgsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:02:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:02:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:02:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:02:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:02:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:02:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:02:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:02:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:02:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:02:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:02:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:02:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:02:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:03:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T12:03:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:03:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T12:03:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T12:03:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-init,tekton.dev/taskRunUID=e20310b1-0465-471a-ab2f-3206e31f092f"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-init-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies,tekton.dev/taskRunUID=61fe382f-5a55-4151-b35f-38eafa804aa2"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-skip-ta\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prefetch-dependencies\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-skip-ta\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-container,tekton.dev/taskRunUID=e13532b8-0787-4ce2-ba60-bb1704ca1f09"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clone-repository,tekton.dev/taskRunUID=cfd78ef1-1537-4fab-8df0-4c0c7aacde31"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:03:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"info","ts":"2026-05-12T12:03:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,batch.kubernetes.io/job-name=segment-bridge-29643120,controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,job-name=segment-bridge-29643120"} {"level":"debug","ts":"2026-05-12T12:03:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T12:03:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T12:03:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:03:09.361804 1 request.go:752] "Waited before sending request" delay="1.136105445s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzY5MjUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:03:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T12:03:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T12:03:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:03:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:03:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:03:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:03:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:03:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:03:19.362252 1 request.go:752] "Waited before sending request" delay="1.884333818s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzcwMDUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:03:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:03:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:03:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:03:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:03:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:03:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:03:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:03:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:03:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:03:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:03:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:03:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:03:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:03:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:03:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:03:31.362898 1 request.go:752] "Waited before sending request" delay="1.891612795s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzcxMzQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T12:03:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:03:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:03:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:03:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:03:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:03:43.363348 1 request.go:752] "Waited before sending request" delay="1.878931006s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzczMjAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:03:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:03:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:03:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:03:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:03:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:03:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:03:55.362476 1 request.go:752] "Waited before sending request" delay="1.886088165s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc2NDMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:03:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:03:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:03:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:03:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:03:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:03:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:03:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:03:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:03:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:04:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T12:04:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:04:07.362539 1 request.go:752] "Waited before sending request" delay="1.996049911s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc3MzksInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:04:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T12:04:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:04:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:04:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:04:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:04:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:04:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:04:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T12:04:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:04:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:05:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:05:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:05:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:05:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:05:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:05:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:05:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:05:09.273379 1 request.go:752] "Waited before sending request" delay="1.395823629s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzgzMjMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:05:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:05:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:05:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:05:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:05:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:05:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:05:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:05:21.274026 1 request.go:752] "Waited before sending request" delay="1.880929205s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/namespace-lister/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg0NjYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:05:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:05:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:05:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:05:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:05:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:05:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:05:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:05:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T12:05:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T12:05:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:05:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:05:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:05:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:05:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:05:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:05:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T12:05:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:05:33.274012 1 request.go:752] "Waited before sending request" delay="1.9970564s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/managed-tenant-6103z/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg1NjksInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-12T12:05:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:05:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T12:05:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:05:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:05:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:05:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T12:05:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:05:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:05:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:05:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:05:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T12:05:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:05:45.273237 1 request.go:752] "Waited before sending request" delay="1.873150712s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg2ODksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T12:05:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T12:05:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies,tekton.dev/taskRunUID=61fe382f-5a55-4151-b35f-38eafa804aa2"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-container,tekton.dev/taskRunUID=e13532b8-0787-4ce2-ba60-bb1704ca1f09"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clone-repository,tekton.dev/taskRunUID=cfd78ef1-1537-4fab-8df0-4c0c7aacde31"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-init,tekton.dev/taskRunUID=e20310b1-0465-471a-ab2f-3206e31f092f"} {"level":"debug","ts":"2026-05-12T12:05:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T12:05:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,batch.kubernetes.io/job-name=segment-bridge-29643120,controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,job-name=segment-bridge-29643120"} {"level":"debug","ts":"2026-05-12T12:05:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T12:05:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T12:05:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:05:55.273549 1 request.go:752] "Waited before sending request" delay="1.878871399s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg4MzcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:05:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T12:05:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T12:05:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:05:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:05:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:05:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:05:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:05:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:06:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:06:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:06:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:06:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:06:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:06:07.272937 1 request.go:752] "Waited before sending request" delay="1.874786728s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzg5NDEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:06:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:06:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:06:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:06:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:06:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:06:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T12:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T12:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T12:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-shell-check,tekton.dev/taskRunUID=a7bc8030-9a72-4b4c-9064-0ef983539291"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-shell-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-tpa-scan,tekton.dev/taskRunUID=26f2baae-28ae-4bdb-bf18-8045bdad6765"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-image-index,tekton.dev/taskRunUID=9169f7bf-88c2-495c-9dfe-c8d4eb80c8b7"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-create-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-image-index-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clone-repository,tekton.dev/taskRunUID=cfd78ef1-1537-4fab-8df0-4c0c7aacde31"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check,tekton.dev/taskRunUID=bd1367e8-75e7-44ad-8813-62a82249ebcd"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-init,tekton.dev/taskRunUID=e20310b1-0465-471a-ab2f-3206e31f092f"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies,tekton.dev/taskRunUID=61fe382f-5a55-4151-b35f-38eafa804aa2"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan,tekton.dev/taskRunUID=b62d4aa4-c0fc-43a2-a4a5-0fc07cfb6320"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check,tekton.dev/taskRunUID=189c2f1c-605b-4e63-9781-987b8130f45b"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-unicode-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-container,tekton.dev/taskRunUID=e13532b8-0787-4ce2-ba60-bb1704ca1f09"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-push\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sbom-syft-generate\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-prepare-sboms\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-build-container-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clamav-scan,tekton.dev/taskRunUID=076dd944-a80b-4840-91c1-9c7c26fba0c4"} {"level":"info","ts":"2026-05-12T12:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,batch.kubernetes.io/job-name=segment-bridge-29643120,controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,job-name=segment-bridge-29643120"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T12:07:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T12:07:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:07:09.328873 1 request.go:752] "Waited before sending request" delay="1.244919312s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk3NDksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:07:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T12:07:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T12:07:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:07:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:07:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:07:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:07:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:07:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:07:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:07:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:07:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:07:21.328311 1 request.go:752] "Waited before sending request" delay="1.878469015s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk5NjIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:07:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:07:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:07:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:07:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:07:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:07:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:07:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:07:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:07:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:07:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:07:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:07:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:07:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:07:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:07:31.329275 1 request.go:752] "Waited before sending request" delay="1.879247724s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAwOTIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T12:07:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:07:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:07:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:07:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:07:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:07:43.328799 1 request.go:752] "Waited before sending request" delay="1.86656538s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAyMDUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:07:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:07:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:07:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:07:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:07:53.329281 1 request.go:752] "Waited before sending request" delay="1.993822224s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAyODEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:07:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:07:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:07:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:07:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:07:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:07:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:07:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:07:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:07:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:07:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:07:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:08:03.329844 1 request.go:752] "Waited before sending request" delay="1.993046912s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDAzNzgsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T12:08:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T12:08:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:08:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T12:08:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:08:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:08:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:08:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:08:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:08:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:08:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T12:08:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:08:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T12:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T12:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T12:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-shell-check,tekton.dev/taskRunUID=a7bc8030-9a72-4b4c-9064-0ef983539291"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-shell-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-shell-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75562958565,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-uslqj-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-uslqj,pac.test.appstudio.openshift.io/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-chgj-kg6ks,tekton.dev/pipelineRunUID=c856c428-568e-4960-941f-21ab2c4fadef,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-chgj-kg6ks-verify,tekton.dev/taskRunUID=638882ad-55e1-4508-85ea-857ad9038b15,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778587690,test.appstudio.openshift.io/scenario=my-integration-test-chgj,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-verify-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clone-repository,tekton.dev/taskRunUID=cfd78ef1-1537-4fab-8df0-4c0c7aacde31"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-init,tekton.dev/taskRunUID=e20310b1-0465-471a-ab2f-3206e31f092f"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check,tekton.dev/taskRunUID=189c2f1c-605b-4e63-9781-987b8130f45b"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-use-trusted-artifact\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-sast-unicode-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-tpa-scan,tekton.dev/taskRunUID=26f2baae-28ae-4bdb-bf18-8045bdad6765"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-oci-attach-report\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-conftest-vulnerabilities\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-tpa-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75562958565,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-uslqj-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-uslqj,pac.test.appstudio.openshift.io/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-chgj-kg6ks,tekton.dev/pipelineRunUID=c856c428-568e-4960-941f-21ab2c4fadef,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-chgj-kg6ks-collect-keyless-params,tekton.dev/taskRunUID=74e0e712-d770-47f9-9087-7131928c4dc3,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778587690,test.appstudio.openshift.io/scenario=my-integration-test-chgj,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"konflux-integration-runner\" not found"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"my-integration-test-chgj-kg6ks-collect-keyless-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-container,tekton.dev/taskRunUID=e13532b8-0787-4ce2-ba60-bb1704ca1f09"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-image-index,tekton.dev/taskRunUID=9169f7bf-88c2-495c-9dfe-c8d4eb80c8b7"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clamav-scan,tekton.dev/taskRunUID=076dd944-a80b-4840-91c1-9c7c26fba0c4"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-extract-and-scan-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-upload\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-clamav-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check,tekton.dev/taskRunUID=bd1367e8-75e7-44ad-8813-62a82249ebcd"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-check-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies,tekton.dev/taskRunUID=61fe382f-5a55-4151-b35f-38eafa804aa2"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan,tekton.dev/taskRunUID=b62d4aa4-c0fc-43a2-a4a5-0fc07cfb6320"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"build-pipeline-tsf-comp-uslqj\" not found"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-rpms-signature-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"default-tenant","object":"tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-output-results\" is not set to runAsNonRoot"} {"level":"info","ts":"2026-05-12T12:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,batch.kubernetes.io/job-name=segment-bridge-29643120,controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,job-name=segment-bridge-29643120"} {"level":"debug","ts":"2026-05-12T12:09:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"debug","ts":"2026-05-12T12:09:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T12:09:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T12:09:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:09:09.334443 1 request.go:752] "Waited before sending request" delay="1.213399317s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDEzNDksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:09:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T12:09:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T12:09:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:09:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:09:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:09:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:09:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:09:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:09:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:09:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:09:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:09:21.334578 1 request.go:752] "Waited before sending request" delay="1.881932464s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE0NzksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:09:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:09:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:09:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:09:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:09:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:09:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:09:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:09:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:09:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:09:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:09:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:09:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:09:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:09:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:09:31.334690 1 request.go:752] "Waited before sending request" delay="1.878931192s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE2NTgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T12:09:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:09:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:09:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:09:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:09:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:09:43.335231 1 request.go:752] "Waited before sending request" delay="1.877948113s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE3NzksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbi1zZXJ2aWNlYWNjb3VudHMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:09:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:09:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:09:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:09:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:09:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:09:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:09:55.333627 1 request.go:752] "Waited before sending request" delay="1.868744728s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDIxNjgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:09:57Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:09:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:09:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:09:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:09:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:09:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:09:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:09:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:09:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T12:10:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T12:10:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:10:05.333675 1 request.go:752] "Waited before sending request" delay="1.870890608s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/release-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDIzODAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:10:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:10:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:10:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T12:10:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:10:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:10:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:10:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:10:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T12:10:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-161d10447e,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,controller-revision-hash=affinity-assistant-161d10447e-75967d8dd8,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-161d10447e-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"affinity-assistant-161d10447e","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"affinity-assistant-161d10447e","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"affinity-assistant-161d10447e","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"affinity-assistant-161d10447e","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"affinity-assistant-161d10447e","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-registry-token-secret,tekton.dev/task=collect-registry-token-secret,tekton.dev/taskRun=managed-g9rst-collect-registry-token-secret,tekton.dev/taskRunUID=9b93ce5a-1717-498d-a760-7286310afa30"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-registry-token-secret-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-task-params,tekton.dev/taskRun=managed-g9rst-collect-task-params,tekton.dev/taskRunUID=c00f33cb-ae13-490c-a755-931f4e14553c"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-task-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=reduce-snapshot,tekton.dev/task=reduce-snapshot,tekton.dev/taskRun=managed-g9rst-reduce-snapshot,tekton.dev/taskRunUID=f2625957-3db6-4afc-8aed-cd179582e0fd"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-reduce-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-g9rst-verify-access-to-resources,tekton.dev/taskRunUID=d5524435-41e2-4ce7-9b26-59b0a1160fce"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-access-to-resources-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-161d10447e,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=apply-mapping,tekton.dev/task=apply-mapping,tekton.dev/taskRun=managed-g9rst-apply-mapping,tekton.dev/taskRunUID=d1672b1b-2cdd-4d05-a3ee-57e981804701"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=check-data-keys,tekton.dev/task=check-data-keys,tekton.dev/taskRun=managed-g9rst-check-data-keys,tekton.dev/taskRunUID=ddfe2b89-1af2-4a29-b61f-fa0eef260566"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-check-data-keys-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-data,tekton.dev/task=collect-data,tekton.dev/taskRun=managed-g9rst-collect-data,tekton.dev/taskRunUID=fd49c326-4b60-4c6e-a0d3-18e29fcf8461"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-data-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-signing-params,tekton.dev/task=collect-signing-params,tekton.dev/taskRun=managed-g9rst-collect-signing-params,tekton.dev/taskRunUID=c51f497a-1b01-4b5c-81b2-a1531d7375f0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:10:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-signing-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"info","ts":"2026-05-12T12:10:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T12:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:11:09.266998 1 request.go:752] "Waited before sending request" delay="1.258094408s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/enterprise-contract-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDMzNjMsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:11:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:11:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:11:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:11:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:11:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:11:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:11:21.267783 1 request.go:752] "Waited before sending request" delay="1.99804652s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM0MzgsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:11:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:11:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:11:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:11:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:11:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:11:31.268120 1 request.go:752] "Waited before sending request" delay="1.867919728s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM1NzksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:11:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:11:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:11:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:11:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:11:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:11:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:11:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:11:43.267382 1 request.go:752] "Waited before sending request" delay="1.995044494s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM3NTEsInN0YXJ0IjoiL3JodHBhLW9wZXJhdG9yLWJpbmQtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:11:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T12:11:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T12:11:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:11:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:11:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:11:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:11:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:11:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:11:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T12:11:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-registry-token-secret,tekton.dev/task=collect-registry-token-secret,tekton.dev/taskRun=managed-g9rst-collect-registry-token-secret,tekton.dev/taskRunUID=9b93ce5a-1717-498d-a760-7286310afa30"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-tpa-params,tekton.dev/task=collect-tpa-params,tekton.dev/taskRun=managed-g9rst-collect-tpa-params,tekton.dev/taskRunUID=38e0113c-8388-457d-8628-818f9b812d17"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-collect-tpa-params-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=filter-already-released-images,tekton.dev/task=filter-already-released-images,tekton.dev/taskRun=managed-g9rst-filter-already-released-images,tekton.dev/taskRunUID=51b403af-8fb1-428d-8178-25d7b2a6cfe4"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-filter-already-released-images-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=push-snapshot,tekton.dev/task=push-snapshot,tekton.dev/taskRun=managed-g9rst-push-snapshot,tekton.dev/taskRunUID=afee5f3f-366c-4a98-805e-5146b5501272"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-push-snapshot-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=verify-access-to-resources,tekton.dev/task=verify-access-to-resources,tekton.dev/taskRun=managed-g9rst-verify-access-to-resources,tekton.dev/taskRunUID=d5524435-41e2-4ce7-9b26-59b0a1160fce"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-161d10447e,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-data,tekton.dev/task=collect-data,tekton.dev/taskRun=managed-g9rst-collect-data,tekton.dev/taskRunUID=fd49c326-4b60-4c6e-a0d3-18e29fcf8461"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-task-params,tekton.dev/taskRun=managed-g9rst-collect-task-params,tekton.dev/taskRunUID=c00f33cb-ae13-490c-a755-931f4e14553c"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=sign-image-cosign-keyless,tekton.dev/taskRun=managed-g9rst-sign-image-cosign-keyless,tekton.dev/taskRunUID=0ff6bdf8-c4e8-4f8a-91fa-8b6b6c6cbfc1"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-sign-image-cosign-keyless-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=apply-mapping,tekton.dev/task=apply-mapping,tekton.dev/taskRun=managed-g9rst-apply-mapping,tekton.dev/taskRunUID=d1672b1b-2cdd-4d05-a3ee-57e981804701"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-apply-mapping-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=check-data-keys,tekton.dev/task=check-data-keys,tekton.dev/taskRun=managed-g9rst-check-data-keys,tekton.dev/taskRunUID=ddfe2b89-1af2-4a29-b61f-fa0eef260566"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=verify-conforma,tekton.dev/task=verify-conforma-konflux-ta,tekton.dev/taskRun=managed-g9rst-verify-conforma,tekton.dev/taskRunUID=94e0a6cd-e527-4cbd-9dae-87e73971b44a"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"release-pipeline\" not found"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-initialize-tuf\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-reduce\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-report-json\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-version\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-show-config\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-assert\" has cpu request 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-use-trusted-artifact\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-initialize-tuf\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-reduce\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-report-json\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-version\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-show-config\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-detailed-report\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"managed-tenant-6103z","object":"managed-g9rst-verify-conforma-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-assert\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-161d10447e,apps.kubernetes.io/pod-index=0,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,controller-revision-hash=affinity-assistant-161d10447e-75967d8dd8,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,statefulset.kubernetes.io/pod-name=affinity-assistant-161d10447e-0,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=collect-signing-params,tekton.dev/task=collect-signing-params,tekton.dev/taskRun=managed-g9rst-collect-signing-params,tekton.dev/taskRunUID=c51f497a-1b01-4b5c-81b2-a1531d7375f0"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"managed-tenant-6103z","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/service=release,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,pipelines.appstudio.openshift.io/type=managed,release.appstudio.openshift.io/name=tsf-app-20260512-120133-000-17bd2cc-lzmml,release.appstudio.openshift.io/namespace=default-tenant,tekton.dev/memberOf=tasks,tekton.dev/pipeline=push-to-external-registry,tekton.dev/pipelineRun=managed-g9rst,tekton.dev/pipelineRunUID=1ce24967-f455-49e1-9397-a7ec317ce538,tekton.dev/pipelineTask=reduce-snapshot,tekton.dev/task=reduce-snapshot,tekton.dev/taskRun=managed-g9rst-reduce-snapshot,tekton.dev/taskRunUID=f2625957-3db6-4afc-8aed-cd179582e0fd"} {"level":"debug","ts":"2026-05-12T12:11:51Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"managed-tenant-6103z"} {"level":"info","ts":"2026-05-12T12:11:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:11:53.267793 1 request.go:752] "Waited before sending request" delay="1.795843505s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM4NjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T12:11:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T12:11:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:11:57Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:12:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T12:12:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:12:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:12:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:12:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:12:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:12:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:12:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T12:12:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:12:03.268069 1 request.go:752] "Waited before sending request" delay="1.876926916s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM5NjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:12:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T12:12:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-container,tekton.dev/taskRunUID=e13532b8-0787-4ce2-ba60-bb1704ca1f09"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-image-index,tekton.dev/taskRunUID=9169f7bf-88c2-495c-9dfe-c8d4eb80c8b7"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clone-repository,tekton.dev/taskRunUID=cfd78ef1-1537-4fab-8df0-4c0c7aacde31"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check,tekton.dev/taskRunUID=bd1367e8-75e7-44ad-8813-62a82249ebcd"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-init,tekton.dev/taskRunUID=e20310b1-0465-471a-ab2f-3206e31f092f"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies,tekton.dev/taskRunUID=61fe382f-5a55-4151-b35f-38eafa804aa2"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-tpa-scan,tekton.dev/taskRunUID=26f2baae-28ae-4bdb-bf18-8045bdad6765"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75562958565,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-uslqj-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-uslqj,pac.test.appstudio.openshift.io/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-chgj-kg6ks,tekton.dev/pipelineRunUID=c856c428-568e-4960-941f-21ab2c4fadef,tekton.dev/pipelineTask=collect-keyless-params,tekton.dev/task=collect-keyless-params,tekton.dev/taskRun=my-integration-test-chgj-kg6ks-collect-keyless-params,tekton.dev/taskRunUID=74e0e712-d770-47f9-9087-7131928c4dc3,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778587690,test.appstudio.openshift.io/scenario=my-integration-test-chgj,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=0.1,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,appstudio.openshift.io/snapshot=tsf-app-20260512-120133-000,build.appstudio.redhat.com/pipeline=enterprise-contract,pac.test.appstudio.openshift.io/cancel-in-progress=false,pac.test.appstudio.openshift.io/check-run-id=75562958565,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=tsf-comp-uslqj-on-push,pac.test.appstudio.openshift.io/repository=tsf-comp-uslqj,pac.test.appstudio.openshift.io/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=rhads-tsf-qe,pac.test.appstudio.openshift.io/url-repository=testrepo,pipelines.appstudio.openshift.io/type=test,tekton.dev/memberOf=tasks,tekton.dev/pipeline=enterprise-contract,tekton.dev/pipelineRun=my-integration-test-chgj-kg6ks,tekton.dev/pipelineRunUID=c856c428-568e-4960-941f-21ab2c4fadef,tekton.dev/pipelineTask=verify,tekton.dev/task=verify-enterprise-contract,tekton.dev/taskRun=my-integration-test-chgj-kg6ks-verify,tekton.dev/taskRunUID=638882ad-55e1-4508-85ea-857ad9038b15,test.appstudio.openshift.io/optional=false,test.appstudio.openshift.io/pipelinerunfinishtime=1778587690,test.appstudio.openshift.io/scenario=my-integration-test-chgj,test.appstudio.openshift.io/type=component"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clamav-scan,tekton.dev/taskRunUID=076dd944-a80b-4840-91c1-9c7c26fba0c4"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan,tekton.dev/taskRunUID=b62d4aa4-c0fc-43a2-a4a5-0fc07cfb6320"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-shell-check,tekton.dev/taskRunUID=a7bc8030-9a72-4b4c-9064-0ef983539291"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check,tekton.dev/taskRunUID=189c2f1c-605b-4e63-9781-987b8130f45b"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T12:12:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T12:12:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:12:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,batch.kubernetes.io/job-name=segment-bridge-29643120,controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,job-name=segment-bridge-29643120"} {"level":"debug","ts":"2026-05-12T12:12:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T12:12:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T12:12:11Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:13:09.260557 1 request.go:752] "Waited before sending request" delay="1.415010961s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ3NDEsInN0YXJ0IjoiL3N5c3RlbTpkZXBsb3llcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:13:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:13:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:13:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:13:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:13:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:13:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:13:19.260997 1 request.go:752] "Waited before sending request" delay="1.866047874s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/integration-service/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ4NjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:13:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:13:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:13:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:13:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:13:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:13:31.260200 1 request.go:752] "Waited before sending request" delay="1.995793254s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU1NzgsInN0YXJ0IjoiL3JodHBhLW9wZXJhdG9yLWJpbmQtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:13:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T12:13:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T12:13:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:13:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:13:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:13:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:13:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:13:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:13:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T12:13:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:13:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:13:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T12:13:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:13:41.261772 1 request.go:752] "Waited before sending request" delay="1.887937239s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU3MTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-12T12:13:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:13:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:13:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:13:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:13:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:13:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:13:45Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T12:13:45Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T12:13:45Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:13:49Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T12:13:49Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:13:53.261874 1 request.go:752] "Waited before sending request" delay="1.997043255s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/default-tenant/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU4MTQsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-shell-check,tekton.dev/taskRunUID=a7bc8030-9a72-4b4c-9064-0ef983539291"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check,tekton.dev/taskRunUID=189c2f1c-605b-4e63-9781-987b8130f45b"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-tpa-scan,tekton.dev/taskRunUID=26f2baae-28ae-4bdb-bf18-8045bdad6765"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-container,tekton.dev/taskRunUID=e13532b8-0787-4ce2-ba60-bb1704ca1f09"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-image-index,tekton.dev/taskRunUID=9169f7bf-88c2-495c-9dfe-c8d4eb80c8b7"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clone-repository,tekton.dev/taskRunUID=cfd78ef1-1537-4fab-8df0-4c0c7aacde31"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check,tekton.dev/taskRunUID=bd1367e8-75e7-44ad-8813-62a82249ebcd"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-init,tekton.dev/taskRunUID=e20310b1-0465-471a-ab2f-3206e31f092f"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies,tekton.dev/taskRunUID=61fe382f-5a55-4151-b35f-38eafa804aa2"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clamav-scan,tekton.dev/taskRunUID=076dd944-a80b-4840-91c1-9c7c26fba0c4"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan,tekton.dev/taskRunUID=b62d4aa4-c0fc-43a2-a4a5-0fc07cfb6320"} {"level":"debug","ts":"2026-05-12T12:13:53Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T12:13:53Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,batch.kubernetes.io/job-name=segment-bridge-29643120,controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,job-name=segment-bridge-29643120"} {"level":"debug","ts":"2026-05-12T12:13:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"debug","ts":"2026-05-12T12:13:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T12:13:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T12:13:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:13:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T12:13:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T12:13:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:14:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:14:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:14:01Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:14:01Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:14:01Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:14:05.260206 1 request.go:752] "Waited before sending request" delay="1.994239451s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-ui/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU5MTYsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:14:05Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:14:05Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:14:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:14:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:14:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=7db88c5647"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=aFImzaN7XMTLc0qsAWHiSsv2PNOJPMjP0l04oA,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5df6ff8bdf"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=86bcdf477b"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tsf-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=586cbb496b"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=61NDiU2koxxLCzAl6gIAYLCVnf76UPkRYTqw81,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tsf-tpa="} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tpa"} {"level":"info","ts":"2026-05-12T12:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=6bfdb6bcb6"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=test,control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":5,"labels":"konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"release-service","items":2,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=release,konflux.konflux-ci.dev/owner=konflux-release-service"} {"level":"debug","ts":"2026-05-12T12:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"release-service"} {"level":"info","ts":"2026-05-12T12:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:15:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:15:09.294253 1 request.go:752] "Waited before sending request" delay="1.050101731s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tsf-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY1MDcsInN0YXJ0IjoiL3Jla29yLWNyZWF0ZXRyZWUtam9iXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tsf-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=77946cb74c"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,batch.kubernetes.io/job-name=ctlog-createtree-job-c6wtp,controller-uid=36f0c7e9-8633-4ff7-86f8-26662768fbd0,job-name=ctlog-createtree-job-c6wtp"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,batch.kubernetes.io/job-name=rekor-createtree-job-2ctjl,controller-uid=ce4a60c2-806c-4df9-a486-b51398fc879e,job-name=rekor-createtree-job-2ctjl"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,batch.kubernetes.io/job-name=segment-backup-installation-qvwjx,controller-uid=8a029229-dc85-46b1-bb81-404103be7d70,job-name=segment-backup-installation-qvwjx"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5554c8d84f"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5b6dddcdf7"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6cf856977c"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5848fffc78"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=97fc8ff76"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,batch.kubernetes.io/job-name=tuf-repository-init-9xt9b,controller-uid=ce93518f-66ad-4765-90fa-373d6b58b58f,job-name=tuf-repository-init-9xt9b,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69c4db84dc"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=54f595d84d"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5d575cc877"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-tas"} {"level":"info","ts":"2026-05-12T12:15:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:15:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":2,"labels":"konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":5,"labels":"control-plane=controller-manager,pod-template-hash=7cbf488fcf"} {"level":"debug","ts":"2026-05-12T12:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"debug","ts":"2026-05-12T12:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"build-service","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=build-service,control-plane=controller-manager,konflux.konflux-ci.dev/component=build-service,konflux.konflux-ci.dev/owner=konflux-build-service"} {"level":"debug","ts":"2026-05-12T12:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"build-service"} {"level":"info","ts":"2026-05-12T12:15:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:15:19.294293 1 request.go:752] "Waited before sending request" delay="1.994362013s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY1NzEsInN0YXJ0IjoiL3JoYmstb3BlcmF0b3IudjI2LjQuMTEtb3ByLjJcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=69889d554d"} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=4arWf0l0XFmEuSy4LKsZ7j0ffQTDuRNJ8B5EUh,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-12T12:15:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-container,tekton.dev/task=buildah-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-container,tekton.dev/taskRunUID=e13532b8-0787-4ce2-ba60-bb1704ca1f09"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=deprecated-base-image-check,tekton.dev/task=deprecated-image-check,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-deprecated-base-image-check,tekton.dev/taskRunUID=bd1367e8-75e7-44ad-8813-62a82249ebcd"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=init,tekton.dev/task=init,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-init,tekton.dev/taskRunUID=e20310b1-0465-471a-ab2f-3206e31f092f"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-shell-check,tekton.dev/task=sast-shell-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-shell-check,tekton.dev/taskRunUID=a7bc8030-9a72-4b4c-9064-0ef983539291"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=tpa-scan,tekton.dev/task=tpa-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-tpa-scan,tekton.dev/taskRunUID=26f2baae-28ae-4bdb-bf18-8045bdad6765"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":3,"labels":"konflux.konflux-ci.dev/component=default-tenant,konflux.konflux-ci.dev/owner=konflux-default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,build.appstudio.redhat.com/build_type=docker,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=build-image-index,tekton.dev/task=build-image-index-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-build-image-index,tekton.dev/taskRunUID=9169f7bf-88c2-495c-9dfe-c8d4eb80c8b7"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clamav-scan,tekton.dev/task=clamav-scan-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clamav-scan,tekton.dev/taskRunUID=076dd944-a80b-4840-91c1-9c7c26fba0c4"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=clone-repository,tekton.dev/task=git-clone-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-clone-repository,tekton.dev/taskRunUID=cfd78ef1-1537-4fab-8df0-4c0c7aacde31"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=prefetch-dependencies,tekton.dev/task=prefetch-dependencies-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-prefetch-dependencies,tekton.dev/taskRunUID=61fe382f-5a55-4151-b35f-38eafa804aa2"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=rpms-signature-scan,tekton.dev/task=rpms-signature-scan,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-rpms-signature-scan,tekton.dev/taskRunUID=b62d4aa4-c0fc-43a2-a4a5-0fc07cfb6320"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"default-tenant","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/version=v0.37.7,appstudio.openshift.io/application=tsf-app,appstudio.openshift.io/component=tsf-comp-uslqj,pipelines.appstudio.openshift.io/type=build,pipelinesascode.tekton.dev/cancel-in-progress=false,pipelinesascode.tekton.dev/check-run-id=75562958565,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=tsf-comp-uslqj-on-push,pipelinesascode.tekton.dev/repository=tsf-comp-uslqj,pipelinesascode.tekton.dev/sha=17bd2ccc815e0e3355351c5519feec309ac0046a,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhads-tsf-qe,pipelinesascode.tekton.dev/url-repository=testrepo,tekton.dev/memberOf=tasks,tekton.dev/pipeline=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRun=tsf-comp-uslqj-on-push-bkd8b,tekton.dev/pipelineRunUID=2a2b25d7-0ab7-4ef9-ae23-ff7145640273,tekton.dev/pipelineTask=sast-unicode-check,tekton.dev/task=sast-unicode-check-oci-ta-min,tekton.dev/taskRun=tsf-comp-uslqj-on-push-bkd8b-sast-unicode-check,tekton.dev/taskRunUID=189c2f1c-605b-4e63-9781-987b8130f45b"} {"level":"debug","ts":"2026-05-12T12:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"default-tenant"} {"level":"info","ts":"2026-05-12T12:15:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":3,"labels":"batch.kubernetes.io/controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,batch.kubernetes.io/job-name=segment-bridge-29643120,controller-uid=a3c0226f-b141-44cf-919d-1f51d9596abc,job-name=segment-bridge-29643120"} {"level":"debug","ts":"2026-05-12T12:15:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"debug","ts":"2026-05-12T12:15:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"segment-bridge","items":2,"labels":"app.kubernetes.io/name=segment-bridge,konflux.konflux-ci.dev/component=segment-bridge,konflux.konflux-ci.dev/owner=konflux-segment-bridge"} {"level":"debug","ts":"2026-05-12T12:15:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"segment-bridge"} {"level":"info","ts":"2026-05-12T12:15:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:15:29.294420 1 request.go:752] "Waited before sending request" delay="1.995010877s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-cli/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY2NjAsInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:15:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-cli","items":2,"labels":"konflux.konflux-ci.dev/component=cli,konflux.konflux-ci.dev/owner=konflux-cli"} {"level":"debug","ts":"2026-05-12T12:15:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-cli"} {"level":"info","ts":"2026-05-12T12:15:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:15:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:15:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:15:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:15:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:15:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:15:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:15:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:15:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:15:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:15:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:15:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:15:41.294737 1 request.go:752] "Waited before sending request" delay="1.850900516s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/image-controller/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY3OTgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:15:43Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:47Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:15:47Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:15:47Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-12T12:15:51Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:15:53.294728 1 request.go:752] "Waited before sending request" delay="1.843893591s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDY5MjQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:15:55Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:15:55Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:15:59Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:15:59Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:16:03Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:16:03Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:16:05.294149 1 request.go:752] "Waited before sending request" delay="1.857983669s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-info/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDcwMzcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:16:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:16:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:16:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"","Version":"v1","Kind":"Service"} {"level":"info","ts":"2026-05-12T12:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":1,"labels":"app.kubernetes.io/instance=tsf-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tsf-pipelines,app.kubernetes.io/version=1.20,helm.sh/chart=tsf-pipelines-0.1.0"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf","items":2,"labels":"batch.kubernetes.io/controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,batch.kubernetes.io/job-name=tsf-tekton-configuration,controller-uid=1707a3eb-92f1-4c55-a939-cf0169cab215,job-name=tsf-tekton-configuration"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf"} {"level":"info","ts":"2026-05-12T12:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"app=proxy,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":3,"labels":"app=dex,konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":2,"labels":"app=proxy,pod-template-hash=746bdd67f4"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=dex,pod-template-hash=747f7697b6"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":5,"labels":"app=proxy,pod-template-hash=777cd5896c"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-ui","items":4,"labels":"konflux.konflux-ci.dev/component=ui,konflux.konflux-ci.dev/owner=konflux-ui"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-ui"} {"level":"info","ts":"2026-05-12T12:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r"} {"level":"info","ts":"2026-05-12T12:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7d56d9fd65"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-12T12:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":5,"labels":"control-plane=controller-manager,pod-template-hash=6f859968fc"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":4,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,control-plane=controller-manager,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=image-controller,konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"image-controller","items":2,"labels":"konflux.konflux-ci.dev/component=image-controller,konflux.konflux-ci.dev/owner=konflux-image-controller"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"image-controller"} {"level":"info","ts":"2026-05-12T12:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"enterprise-contract-service","items":2,"labels":"konflux.konflux-ci.dev/component=enterprise-contract,konflux.konflux-ci.dev/owner=konflux-enterprise-contract"} {"level":"debug","ts":"2026-05-12T12:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"enterprise-contract-service"} {"level":"info","ts":"2026-05-12T12:17:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:17:09.285295 1 request.go:752] "Waited before sending request" delay="1.189278163s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc2MzksInN0YXJ0IjoiL3N5c3RlbTppbWFnZS1idWlsZGVyc1x1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-12T12:17:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager,pod-template-hash=59c77684cc"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector,pod-template-hash=5d99449ffd"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook,pod-template-hash=7dc76cbb94"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.4,app=cert-manager"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":5,"labels":"app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.4,app=cainjector"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager","items":7,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.4,app=webhook"} {"level":"debug","ts":"2026-05-12T12:17:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager"} {"level":"info","ts":"2026-05-12T12:17:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-548c466b7c,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=744f6fc4d9"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,batch.kubernetes.io/job-name=tsf-iam,controller-uid=a86e07ac-0f90-4cf2-a221-6da59944dbd3,job-name=tsf-iam"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"app.kubernetes.io/instance=tsf-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tsf-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tsf-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-12T12:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tsf-keycloak"} {"level":"info","ts":"2026-05-12T12:17:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:17:21.286297 1 request.go:752] "Waited before sending request" delay="1.996903389s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/cert-manager-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc3MTgsInN0YXJ0IjoiL3BpcGVsaW5lcy1zY2Mtcm9sZWJpbmRpbmdcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,olm.permissions.hash=5BvcE6aNRl1kjQ4qoZiC75uAhCACnLI6hzXqiT,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":4,"labels":"name=cert-manager-operator,pod-template-hash=5b66478c58"} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":2,"labels":"app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager-metrics-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=cert-manager-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"cert-manager-operator","items":1,"labels":"app.kubernetes.io/component=manager,app.kubernetes.io/created-by=cert-manager-operator,app.kubernetes.io/instance=controller-manager,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=deployment,app.kubernetes.io/part-of=cert-manager-operator,olm.deployment-spec-hash=3sswK1i6h95ceYyTm9Y8NTcnSqHLcsB2WsCSCq,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=cert-manager-operator,olm.owner=cert-manager-operator.v1.19.0,operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator="} {"level":"debug","ts":"2026-05-12T12:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"cert-manager-operator"} {"level":"info","ts":"2026-05-12T12:17:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-info","items":2,"labels":"konflux.konflux-ci.dev/component=info,konflux.konflux-ci.dev/owner=konflux-info"} {"level":"debug","ts":"2026-05-12T12:17:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-info"} {"level":"info","ts":"2026-05-12T12:17:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":1,"labels":"app.kubernetes.io/component=webhook,app.kubernetes.io/created-by=integration-service,app.kubernetes.io/instance=webhook-service,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=service,app.kubernetes.io/part-of=integration-service,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":2,"labels":"control-plane=controller-manager,pod-template-hash=7b666bf6d8"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":6,"labels":"control-plane=controller-manager,pod-template-hash=8497d7c8d"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":3,"labels":"batch.kubernetes.io/controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,batch.kubernetes.io/job-name=integration-service-snapshot-garbage-collector-29643120,controller-uid=72c85ac5-c764-413d-a5b5-914011434e9b,job-name=integration-service-snapshot-garbage-collector-29643120"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"integration-service","items":5,"labels":"control-plane=controller-manager,konflux.konflux-ci.dev/component=integration,konflux.konflux-ci.dev/owner=konflux-integration-service"} {"level":"debug","ts":"2026-05-12T12:17:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"integration-service"} {"level":"info","ts":"2026-05-12T12:17:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0512 12:17:31.286453 1 request.go:752] "Waited before sending request" delay="1.83089287s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/konflux-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc4NTAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,olm.deployment-spec-hash=89feUewdEmmyMoWae71sVKb89hZ8OCO8vfIxce,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=jFynzryran0Td5CUgJ3rwrkK6ZdYd35f5iILp,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=konflux-operator,olm.owner=konflux-operator.v0.1.12,olm.permissions.hash=6VkYjWmwqEjnVGzheji50fOML3rUm81RARgZTo,operators.coreos.com/konflux-operator.konflux-operator="} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"konflux-operator","items":5,"labels":"app.kubernetes.io/name=konflux-operator,control-plane=controller-manager,pod-template-hash=5bf6d87b75"} {"level":"debug","ts":"2026-05-12T12:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"konflux-operator"} {"level":"info","ts":"2026-05-12T12:17:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-12T12:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":7,"labels":"apps=namespace-lister,pod-template-hash=696b855848"} {"level":"debug","ts":"2026-05-12T12:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"debug","ts":"2026-05-12T12:17:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"namespace-lister","items":4,"labels":"apps=namespace-lister,konflux.konflux-ci.dev/component=namespace-lister,konflux.konflux-ci.dev/owner=konflux-namespace-lister"} {"level":"debug","ts":"2026-05-12T12:17:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"namespace-lister"} {"level":"info","ts":"2026-05-12T12:17:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"}